CVE-2017-7673

CVE-2017-7673 impacts Apache OpenMeetings 1.0.0, stemming from weak cryptographic storage, a lack of CAPTCHA in registration and password reset, and missing brute-force protection on authentication forms. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to remotely compromise confidentiality, integrity, and availability with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.