Описание
Apache OpenMeetings has Inadequate Encryption Strength
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
Пакеты
Наименование
org.apache.openmeetings:openmeetings-parent
maven
Затронутые версииВерсия исправления
>= 1.0.0, < 3.3.0
3.3.0
Связанные уязвимости
CVSS3: 9.8
nvd
больше 8 лет назад
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.