CVE-2016-0783
Last modified
CVE-2016-0783 is a vulnerability of currently unknown severity. The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time.. EPSS estimates a 7.10% chance of exploitation in the next 30 days.
Description
The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Openmeetings | <= 3.1.0 |
References
- http://openmeetings.apache.org/security.htmlPatch, Vendor Advisory
- http://openmeetings.apache.org/security.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-0783?
How severe is CVE-2016-0783?
How do I fix CVE-2016-0783?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-0777The resend_bytes function in roaming_common.c in the client …6.5
- CVE-2016-0778The (1) roaming_read and (2) roaming_write functions in roam…8.1
- CVE-2016-0779The EjbObjectInputStream class in Apache TomEE before 1.7.4 …
- CVE-2016-0780It was discovered that cf-release v231 and lower, Pivotal Cl…7.5
- CVE-2016-0781The UAA OAuth approval pages in Cloud Foundry v208 to v231, …
- CVE-2016-0782The administration web console in Apache ActiveMQ 5.x before…
- CVE-2016-0784Directory traversal vulnerability in the Import/Export Syste…
- CVE-2016-0785Apache Struts 2.x before 2.3.28 allows remote attackers to e…
- CVE-2016-0786Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-0787The diffie_hellman_sha256 function in kex.c in libssh2 befor…
- CVE-2016-0788The remoting module in Jenkins before 1.650 and LTS before 1…
- CVE-2016-0789CRLF injection vulnerability in the CLI command documentatio…
Are you affected by CVE-2016-0783?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST