PT-2017-17882 · Apache · Apache Openmeetings+1

Published 2017-07-14 · Updated 2022-05-17 · CVE-2017-7683

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 1.0.0 through prior to 3.3.0

Description The issue concerns the display of the Tomcat version and a detailed error stack trace, which is not secure. This could potentially reveal sensitive information.

Recommendations For Apache OpenMeetings versions 1.0.0 through prior to 3.3.0, update to version 3.3.0 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-7683

GHSA-4V67-WG88-37P9

Affected Products

Apache Openmeetings

Apache Tomcat

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-7683 · Security Note
• https://osv.dev/vulnerability/GHSA-4v67-wg88-37p9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7683 · Vendor Advisory
• https://github.com/apache/openmeetings · Note
• http://markmail.org/message/hint6fp66lijqdvu · Note