PT-2017-17882 · Apache · Apache Openmeetings+1

Publicado 2017-07-14 · Atualizado 2022-05-17 · CVE-2017-7683

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 1.0.0 through prior to 3.3.0

Description The issue concerns the display of the Tomcat version and a detailed error stack trace, which is not secure. This could potentially reveal sensitive information.

Recommendations For Apache OpenMeetings versions 1.0.0 through prior to 3.3.0, update to version 3.3.0 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7683

GHSA-4V67-WG88-37P9

Produtos afetados

Apache Openmeetings

Apache Tomcat

Referências · 5

• https://github.com/apache/openmeetings · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7683 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-4v67-wg88-37p9 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7683 · Aviso do Fabricante
• http://markmail.org/message/hint6fp66lijqdvu · Nota