PT-2023-3158 · Apache · Apache Openmeetings

Stefan Schiller

·

CVE-2023-28936

·

Published

2023-05-12

·

Updated

2024-10-11

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 2.0.0 through 7.1.0
Description The issue is related to insufficient comparison in the Apache OpenMeetings video conferencing software. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information.
Recommendations For Apache OpenMeetings versions 2.0.0 through 7.1.0, update to a version after 7.1.0 to resolve the issue.

Exploit

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284CWE-697

Related Identifiers

BDU:2023-03257
CVE-2023-28936
GHSA-V93H-RWJ8-78QH

Affected Products

Apache Openmeetings