org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2020-2160 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2020-2163 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2020-2104 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2019-14837 via org.keycloak:keycloak-core (4.4.0.final)

org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-adapter-core (4.2.0.final) +64 more potentially affected by CVE-2019-14837 via org.keycloak:keycloak-core (4.2.0.final)

org.keycloak:keycloak-core MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.acegisecurity:acegi-security-cas (>=1.0.5, <=1.0.7), org.acegisecurity:acegi-security-samples-contacts (1.0.7) +4 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (1.2.9)

org.springframework:spring-web MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security-cas =1.0.5, =1.0.7 -...

com.nortal.jroad.starter:j-road-client (0.3.0), com.nortal.jroad.starter:j-road-server (0.3.0) +19 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (5.0.19.release)

org.springframework:spring-web MAVEN version 5.0.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.nortal.jroad.starter:j-road-client 0.3.0 - com.nortal.jroad.starter:j-road-server 0.3....

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.2.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final Source cves:...

io.github.johnjcool:keycloak-cas-services (4.5.0.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.5.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final Source cves: CVE-2019-14832 Source...

io.github.johnjcool:keycloak-cas-services (4.4.0.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.4.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final Source cves: CVE-2019-14832 Source...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.1.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final Source cves:...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.3.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final Source cves:...

io.github.johnjcool:keycloak-cas-services (4.8.3.final), it.vige:school-keycloak-rooms (>=1.2.2, <=1.3.0) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.8.3.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.8.3.final - it.vige:school-keycloak-rooms =1.2....

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +158 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.1)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 -...

GHSA-G24W-373R-5PXG Use of Insufficiently Random Values in Apereo CAS

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong...

org.apereo.cas:cas-server-core (5.2.7), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.7) +128 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.2.7)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-server-core 5.2.7 -...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-rc2, <=6.1.0-rc4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-rc4, <=6.1.0-rc4) +197 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (>=6.0.0-rc4, <=6.1.0-rc4)

org.apereo.cas:cas-server-core-services-api MAVEN version =6.0.0-rc4, =6.1.0-rc2, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.1.0-rc4 and more Source cves: CVE-2019-10754...

org.apereo.cas:cas-server-core (5.2.8), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.8) +132 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.2.8)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-server-core 5.2.8 -...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-rc2, <=6.1.0-rc4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-rc4, <=6.1.0-rc4) +197 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (>=6.0.0-rc4, <=6.1.0-rc4)

org.apereo.cas:cas-server-core-services-api MAVEN version =6.0.0-rc4, =6.1.0-rc2, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.1.0-rc4 and more Source cves: CVE-2019-10754...