Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-42973
HistoryMay 17, 2023 - 12:00 a.m.

Apache OpenMeetings Authorization Issues Vulnerability

2023-05-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
multilingual video conferencing
desktop sharing
privilege management
impersonation vulnerability
apache openmeetings

0.003 Low

EPSS

Percentile

66.1%

Apache OpenMeetings is a multilingual, customizable video conferencing and collaboration system from the Apache Foundation. The product supports audio, video and allows users to view each participant’s desktop and more. An authorization issue vulnerability exists in Apache OpenMeetings versions 3.1.3 through 7.1.0, which stems from improper privilege management in the application and can be exploited by an attacker to impersonate another user.

CPENameOperatorVersion
apache openmeetings >=3.1.3,le7.1.0

0.003 Low

EPSS

Percentile

66.1%