org.apereo.cas:cas-management-webapp (5.0.6), org.apereo.cas:cas-management-webapp-support (5.0.6) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.6)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.6 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc1) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc1)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 -...

org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.1), org.apereo.cas:cas-server-support-passwordless (5.3.1) +11 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core-configuration-metadata-repository 5.3.1 -...

org.apereo.cas:cas-management-webapp (5.0.3.1), org.apereo.cas:cas-management-webapp-support (5.0.3.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.3.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.3.1 - org.apereo.cas:cas-management-webapp-suppo...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc3)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc3 Source cves: CVE-2021-42567 Sour...

org.apereo.cas:cas-management-webapp (5.0.1), org.apereo.cas:cas-management-webapp-support (5.0.1) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.1)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.1 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.1.0), org.apereo.cas:cas-server-core (5.1.0) +113 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.0)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0 - org.apereo.cas:cas-server-core 5.1.0 -...

org.apereo.cas:cas-server-core (5.2.3), org.apereo.cas:cas-server-core-audit (5.2.3) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.3)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.3 - org.apereo.cas:cas-server-core-audit 5.2.3 -...

org.apereo.cas:cas-server-core (5.2.4), org.apereo.cas:cas-server-core-audit (5.2.4) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.4)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.4 - org.apereo.cas:cas-server-core-audit 5.2.4 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc2), org.apereo.cas:cas-server-core-configuration-metadata-repository (5.3.0-rc2) +10 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.3.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.3.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc2 -...

org.apereo.cas:cas-management-webapp-support (5.1.9), org.apereo.cas:cas-server-core (5.1.9) +114 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.1.9)

org.apereo.cas:cas-server-core-web MAVEN version 5.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.9 - org.apereo.cas:cas-server-core 5.1.9 -...

org.apereo.cas:cas-management-webapp (5.0.2), org.apereo.cas:cas-management-webapp-support (5.0.2) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.2)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.2 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.7), org.apereo.cas:cas-management-webapp-support (5.0.7) +76 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.7)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.7 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp (5.0.9), org.apereo.cas:cas-management-webapp-support (5.0.9) +75 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.0.9)

org.apereo.cas:cas-server-core-web MAVEN version 5.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.9 - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-support (5.2.0-rc2), org.apereo.cas:cas-server-core (5.2.0-rc2) +130 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.0-rc2)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.2.0-rc2 - org.apereo.cas:cas-server-core...

org.apereo.cas:cas-server-core (5.2.5), org.apereo.cas:cas-server-core-audit (5.2.5) +155 more potentially affected by CVE-2021-42567 via org.apereo.cas:cas-server-core-web (5.2.5)

org.apereo.cas:cas-server-core-web MAVEN version 5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-web and may be impacted: - org.apereo.cas:cas-server-core 5.2.5 - org.apereo.cas:cas-server-core-audit 5.2.5 -...

Information Disclosure

cas-server-support-otp-mfa is vulnerable to information disclosure. The vulnerability exists as the user's secret key is sent as a GET parameter in an img tag when Google Authenticator is used...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

Insecure Randomness

Overview org.apereo.cas:cas-server-support-shell is a package for the CAS command-line shell provides the ability to query the CAS server for help on available settings/modules and various other utility functions. Affected versions of this package are vulnerable to Insecure Randomness. A insecure...

Insecure Randomness

Overview org.apereo.cas:cas-server-support-oauth-core-api is a CAS Server Support OAuth Core API for supporting OAuth within Apereo CAS. Affected versions of this package are vulnerable to Insecure Randomness. A insecure source of randomness is used to generate all of its random values as it reli...