Maven/org.apereo.cas:cas-server-support-simple-mfa CVE-2019-10754: high 8.1
Use of Insufficiently Random Values in Apereo CAS
Action: Upgrade org.apereo.cas:cas-server-support-simple-mfa to 6.1.0-RC5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.0-RC5 | - |
Fixed versions
| 6.1.0-RC5 |
Sources
- osv: GHSA-g24w-373r-5pxg
- https://nvd.nist.gov/vuln/detail/CVE-2019-10754
- https://github.com/apereo/cas/commit/40bf278e66786544411c471de5123e7a71826b9f
- https://github.com/apereo/cas
- https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467402
- https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467404
- https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467406
- https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468868
- https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468869
CVE-2019-10754 · published · modified · JSON