description: In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged users are not password protected allowing an authenticated attacker to deny service for privileged users.
problem types: Insufficient Access Controls
affected:
{
product: Apache OpenMeetings
vendor: Apache Software Foundation
versions:
status: affected, version: 3.0.0 - 4.0.1
}