Description
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
Remediation
References
http://markmail.org/message/3hshl26omwjo6c5i
http://www.securityfocus.com/bid/99587
Related Vulnerabilities
CVE-2022-25883 Vulnerability in maven package org.webjars.npm:semver
CVE-2022-21718 Vulnerability in npm package electron
CVE-2021-21638 Vulnerability in maven package org.jenkins-ci.plugins:tfs
CVE-2021-43138 Vulnerability in maven package org.webjars:async
CVE-2019-17352 Vulnerability in maven package com.jfinal:jfinal