PT-2026-31641

CVE-2026-34020

·

Published

2026-04-09

·

Updated

2026-04-10

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apache OpenMeetings versions 3.1.3 through 8.9.99
Description The REST login endpoint uses the HTTP GET method, transmitting the username and password as query parameters. This practice exposes sensitive credentials in server logs, browser history, and potentially through network monitoring.
Recommendations Upgrade to version 9.0.0.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-598: Use of GET Request Method With Sensitive Query Strings
Related identifiers
CVE-2026-34020
GHSA-GCVM-C75M-H4P4
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com