PT-2017-17881 · Apache · Apache Openmeetings

Published 2017-07-14 · Updated 2022-05-13 · CVE-2017-7682

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings version 3.2.0

Description The issue allows for parameter manipulation attacks, giving an attacker access to restricted areas.

Recommendations For Apache OpenMeetings version 3.2.0, update to a version that includes a fix for this issue, as no specific workaround is provided for this version.

Fix

Related Identifiers

CVE-2017-7682

GHSA-2Q65-XXG6-3QH5

Affected Products

Apache Openmeetings

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-7682 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7682 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-2q65-xxg6-3qh5 · Vendor Advisory
• https://github.com/apache/openmeetings · Note
• http://markmail.org/message/dbrbvf5k343ulivf · Note