{"action":"Upgrade org.apereo.cas:cas-server-support-simple-mfa to 6.1.0-RC5 or later.","affected":[{"fixed":"6.1.0-RC5","introduced":"0"}],"component":"org.apereo.cas:cas-server-support-simple-mfa","cve_ids":["CVE-2019-10754"],"ecosystem":"Maven","epss":0.01767,"exploited":false,"fixed_versions":["6.1.0-RC5"],"ghsa_id":"GHSA-g24w-373r-5pxg","id":"tcs_01M5N8X0GWS8BVTCJEC5CKC7AT","modified_at":"2025-01-14T07:14:26.961906Z","published_at":"2022-05-24T16:56:41Z","references":["https://osv.dev/vulnerability/GHSA-g24w-373r-5pxg","https://nvd.nist.gov/vuln/detail/CVE-2019-10754","https://github.com/apereo/cas/commit/40bf278e66786544411c471de5123e7a71826b9f","https://github.com/apereo/cas","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467402","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467404","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-467406","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468868","https://snyk.io/vuln/SNYK-JAVA-ORGAPEREOCAS-468869"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g24w-373r-5pxg","url":"https://osv.dev/vulnerability/GHSA-g24w-373r-5pxg"}],"summary":"Use of Insufficiently Random Values in Apereo CAS"}