CVE-2024-11208

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11209

The connected documents confirm a vulnerability in Apereo CAS 6.6 within the 2FA login flow, specifically affecting the /login?service path. The root cause is described as an improper authentication issue, enabling remote initiation of an attack, with public disclosure of the exploit. All sources...

CVE-2024-11209 Apereo CAS 2FA login improper authentication

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-11209 Apereo CAS 2FA login improper authentication

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-11209 Apereo CAS 2FA login improper authentication

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-11208

CVE-2024-11208 affects Apereo CAS 6.6. The issue concerns an unknown functionality under the /login?service endpoint where manipulation leads to session expiration. Exploitation is described as remote with high attack complexity, but public disclosure exists. The documents identify the vulnerabil...

CVE-2024-11208 Apereo CAS login session expiration

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11208 Apereo CAS login session expiration

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11208 Apereo CAS login session expiration

A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login?service. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitati...

CVE-2024-11207

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-11207 Apereo CAS login redirect

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-11207 Apereo CAS login redirect

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2024-11207

CVE-2024-11207 affects Apereo CAS 6.6. The vulnerability is an open redirect in the /login flow caused by manipulation of the redirect_uri parameter. It is exploitable remotely and details were disclosed publicly. Connected sources confirm impact is limited to open redirect; there is no new remed...

CVE-2024-11207 Apereo CAS login redirect

A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirecturi leads to open redirect. The attack can be launched remotely. The exploit has been disclosed t...

Apereo CAS Authorization Vulnerability

Apereo CAS is a web-based enterprise multilingual single sign-on solution from Apereo Open Source. An authorization issue vulnerability exists in Apereo CAS version 6.6, which stems from the /login?service page in the 2FA component containing an improper authentication issue...

CVE-2024-11209: Improper Authentication

A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2024-16826

Name of the Vulnerable Software and Affected Versions Apereo CAS version 6.6 Description A critical issue affects the 2FA component of Apereo CAS, specifically an unknown part of the file /login?service. This leads to improper authentication and can be initiated remotely. The exploit has been...

PT-2024-16825

Name of the Vulnerable Software and Affected Versions Apereo CAS version 6.6 Description A vulnerability was found in Apereo CAS, affecting some unknown functionality of the file /login?service, leading to session expiration. The attack may be launched remotely, with a rather high complexity and...

Apereo CAS code issue vulnerabilities

Apereo CAS is Apereo's open source web-based enterprise multilingual single sign-on solution. A code issue vulnerability exists in Apereo CAS version 6.6, which stems from the /login?service page containing a session expiration issue...

Apereo CAS input validation vulnerability

Apereo CAS is a web-based enterprise multilingual single sign-on solution from Apereo open source. An input validation error vulnerability exists in Apereo CAS version 6.6, which stems from the /login page containing an open redirection issue...