CVE-2020-27178
2 advisories.
Maven/org.apereo.cas:cas-server-webapp CVE-2020-27178: high 7.5
Improper Authentication in Apereo CAS
Action: Upgrade org.apereo.cas:cas-server-webapp to 5.3.16 (5.3.x), 6.1.7.2 (6.1.x) or 6.2.4 (6.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.16 | - |
| 6.0.0 | 6.1.7.2 | - |
| 6.2.0 | 6.2.4 | - |
Fixed versions
| 5.3.16 | 6.1.7.2 | 6.2.4 |
Sources
- osv: GHSA-q39c-5vh5-vw2p
- https://nvd.nist.gov/vuln/detail/CVE-2020-27178
- https://apereo.github.io/2020/10/14/gauthvuln
CVE-2020-27178 · published · modified · JSON
Maven/org.apereo.cas:cas-server-support-otp-mfa-core CVE-2020-27178: high 7.5
Improper Authentication in Apereo CAS
Action: Upgrade org.apereo.cas:cas-server-support-otp-mfa-core to 5.3.16 (5.3.x), 6.1.7.2 (6.1.x) or 6.2.4 (6.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.3.0 | 5.3.16 | - |
| 6.0.0 | 6.1.7.2 | - |
| 6.2.0 | 6.2.4 | - |
Fixed versions
| 5.3.16 | 6.1.7.2 | 6.2.4 |
Sources
- osv: GHSA-q39c-5vh5-vw2p#Maven/org.apereo.cas:cas-server-support-otp-mfa-core
- https://nvd.nist.gov/vuln/detail/CVE-2020-27178
- https://apereo.github.io/2020/10/14/gauthvuln
CVE-2020-27178 · published · modified · JSON