io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.2.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final Source cves:...

io.github.johnjcool:keycloak-cas-services (4.8.3.final), it.vige:school-keycloak-rooms (>=1.2.2, <=1.3.0) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.8.3.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.8.3.final - it.vige:school-keycloak-rooms =1.2....

io.github.johnjcool:keycloak-cas-services (4.4.0.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.4.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final Source cves: CVE-2019-14832 Source...

io.github.johnjcool:keycloak-cas-services (4.5.0.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.5.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final Source cves: CVE-2019-14832 Source...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final) potentially affected by CVE-2019-14832 via org.keycloak:keycloak-model-jpa (4.1.0.final)

org.keycloak:keycloak-model-jpa MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final Source cves:...

org.apereo.cas:cas-server-core (5.2.8), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.8) +132 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.2.8)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-server-core 5.2.8 -...

org.apereo.cas:cas-server-core (5.2.7), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.7) +128 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.2.7)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-server-core 5.2.7 -...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-rc2, <=6.1.0-rc4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-rc4, <=6.1.0-rc4) +185 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (>=6.0.0-rc4, <=6.1.0-rc4)

org.apereo.cas:cas-server-core-services-authentication MAVEN version =6.0.0-rc4, =6.1.0-rc2, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.1.0-rc4 and more Source cves:...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +158 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.1)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 -...

Use of Insufficiently Random Values in Apereo CAS

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-rc2, <=6.1.0-rc4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-rc4, <=6.1.0-rc4) +197 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (>=6.0.0-rc4, <=6.1.0-rc4)

org.apereo.cas:cas-server-core-services-api MAVEN version =6.0.0-rc4, =6.1.0-rc2, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.1.0-rc4 and more Source cves: CVE-2019-10754...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +155 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.1)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-management-webapp-configuration...

org.apereo.cas:cas-server-core (5.2.6), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.6) +132 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.2.6)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-server-core 5.2.6 -...

org.apereo.cas:cas-server-core (5.2.2), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.2) +128 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.2.2)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-server-core 5.2.2 -...

org.apereo.cas:cas-server-core (5.2.0-rc4), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.0-rc4) +126 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.2.0-rc4)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.2.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-server-core 5.2.0-rc4 -...

GHSA-G24W-373R-5PXG Use of Insufficiently Random Values in Apereo CAS

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong...

org.apereo.cas:cas-server-core (5.3.0), org.apereo.cas:cas-server-core-logout (5.3.0) +155 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.3.0)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-server-core 5.3.0 -...

org.apereo.cas:cas-server-core (5.3.0), org.apereo.cas:cas-server-core-logout (5.3.0) +152 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.0)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-server-core 5.3.0 -...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc3) potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-authentication (5.3.0-rc3)

org.apereo.cas:cas-server-core-services-authentication MAVEN version 5.3.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-authentication and may be impacted: - org.apereo.cas:cas-management-webapp-support...

org.apereo.cas:cas-server-core (5.2.5), org.apereo.cas:cas-server-core-configuration-cloud-mongo (5.2.5) +132 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (5.2.5)

org.apereo.cas:cas-server-core-services-api MAVEN version 5.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apereo.cas:cas-server-core-services-api and may be impacted: - org.apereo.cas:cas-server-core 5.2.5 -...