Improper Authentication

org.apache.openmeetings:openmeetings-web is vulnerable to Improper Authentication. An authenticated attacker that has gained access to certain private information is able to use this to impersonate another user because permissions can be incorrectly set during an invitation hash check...