io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-adapter-core (4.3.0.final) +64 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-core (4.3.0.final)

org.keycloak:keycloak-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

Mageia: Security Advisory (MGASA-2014-0387)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0293)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0452)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.470)

org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...

Rocket.Chat: TOTP 2 Factor Authentication Bypass

Summary Two Factor Authentication can be bypassed when telling the server to use CAS during login. Description The 2FA Login Handler skips validation when it finds CAS enabled. When the clients sends the option among the login request, the login proceeds without validation of a second factor. In...

U.S. Dept Of Defense: CVE-2021-42567 - Apereo CAS Reflected XSS on https://█████████

Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. CAS is vulnerable to a Reflected Cross-Site Scripting attack, via POST requests sent to the REST API endpoints. The payload could be injected on URLs: /███████/. Malicious scripts can be submitted to CAS via...

Parse CAs from UI Input

This plugin checks for data in from the Trusted CAs UI input, and stores the info if any in the KB TRUSTED...

org.jasig.cas:cas-server-support-pac4j (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-pac4j-webflow (>=4.2.0-rc1, <=4.2.1) +1 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.2)

org.pac4j:pac4j-oidc MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.jasig.cas:cas-server-support-pac4j =4.2.0-rc1, =4.2.0-rc1, =4.2.1 - org.pac4j:pac4j-config 1.8.2 Source cves:...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-management-webapp-support (5.3.3) +232 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (3.1.0)

org.pac4j:pac4j-oidc MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-management-webapp-support 5.3.3 -...

org.apereo.cas:cas-management-webapp (>=5.0.3, <=5.0.5), org.apereo.cas:cas-management-webapp-support (>=5.0.3, <=5.0.5) +84 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.9.6)

org.pac4j:pac4j-oidc MAVEN version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3,...

org.apereo.cas:cas-management-webapp (>=5.0.0.rc4, <=5.0.2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.rc4, <=5.0.2) +85 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.9.4)

org.pac4j:pac4j-oidc MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4...

org.apereo.cas:cas-management-webapp-support (5.1.0-rc4), org.apereo.cas:cas-management-webapp-support-ldap (5.1.0-rc4) +122 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (2.0.0-rc2)

org.pac4j:pac4j-oidc MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0-rc4 - org.apereo.cas:cas-management-webapp-support-ldap 5.1.0-rc...

org.apereo.cas:cas-server-core (5.3.0-rc4), org.apereo.cas:cas-server-core-api-audit (5.3.0-rc4) +225 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (3.0.0-rc2)

org.pac4j:pac4j-oidc MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-server-core 5.3.0-rc4 - org.apereo.cas:cas-server-core-api-audit 5.3.0-rc4 -...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (5.3.1) +232 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (3.0.1)

org.pac4j:pac4j-oidc MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 - org.apereo.cas:cas-management-webapp-support 5.3.1 -...

org.apache.knox:gateway-provider-security-pac4j (>=0.14.0, <=1.1.0), org.apache.knox:gateway-release (>=0.14.0, <=1.1.0) +206 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (2.1.0)

org.pac4j:pac4j-oidc MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apache.knox:gateway-provider-security-pac4j =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =0.14.0, =5.2.0-rc2,...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.0.m2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.0.m2) +75 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.8)

org.pac4j:pac4j-oidc MAVEN version 1.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1,...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2021-4133 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...