org.ff4j:ff4j-security-spring (>=1.0.0, <=1.1.0), org.springframework.security:spring-security-acl (3.0.8.release) +7 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.8.release)

org.springframework.security:spring-security-core MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.ff4j:ff4j-security-spring =1.0.0, =1.1.0 -...

com.myjeeva:spring-extensions (>=1.0.0, <=1.0.1), org.springframework.security:spring-security-acl (2.0.6.release) +6 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.6.release)

org.springframework.security:spring-security-core MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.myjeeva:spring-extensions =1.0.0, =1.0.1 -...

cn.dceast.platform:platform-security-starter (2.2.3), com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.0.114-release) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (>=4.0.1.release, <=4.2.8.release)

org.springframework.security:spring-security-cas MAVEN version =4.0.1.release, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.83-rc1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =0.3.1, =0.3.1, =0.3.2 - net.eulerframework:euler-web-authentication-impl-hibernate 0.3.9 and more Source cves...

com.github.dblock.waffle:waffle-spring-security2 (>=1.7, <=1.7.5), com.googlecode.cedar-common:cedar-common-gae (>=2.1.3, <=5.8.4) +12 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.8.release)

org.springframework.security:spring-security-core MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.7...

org.eobjects.datacleaner:datacleaner-monitor-completeness-analysis-wizard (>=5.0-rc1, <=5.1.5.3), org.eobjects.datacleaner:datacleaner-monitor-copy-data-wizard (>=5.0-rc1, <=5.1.5.3) +11 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.9.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: -...

org.opencastproject:opencast-security-cas (>=7.2, <=18.5) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.7.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.opencastproject:opencast-security-cas =7.2, =18.5...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

org.opencastproject:opencast-security-cas (6.6) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.4.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.opencastproject:opencast-security-cas 6.6 Source...

org.jasig.cas:cas-management-webapp (>=4.0.0-rc1, <=4.0.0-rc3) potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.1.2.release)

org.springframework.security:spring-security-cas MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: - org.jasig.cas:cas-management-webapp =4.0.0-rc1,...

org.springframework.security:spring-security-acl (3.1.5.release), org.springframework.security:spring-security-aspects (3.1.5.release) +7 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.1.5.release)

org.springframework.security:spring-security-core MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl...

org.eobjects.datacleaner:datacleaner-completeness-analysis-wizard (>=3.5.9, <=3.7.4), org.eobjects.datacleaner:datacleaner-copy-data-wizard (>=3.5.9, <=3.7.4) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (3.2.1.release)

org.springframework.security:spring-security-cas MAVEN version 3.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-cas and may be impacted: -...

com.github.btheu.settesting:spring (0.1.0), org.pac4j:spring-security-pac4j (>=1.2.3, <=1.2.4) +10 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (3.2.2.release)

org.springframework.security:spring-security-core MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.btheu.settesting:spring 0.1.0 -...

org.codehaus.enunciate:enunciate-spring-security-rt (>=1.20, <=1.22), org.codehaus.spring-security-oauth:spring-security-oauth (>=2.4, <=3.19) +20 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-core (2.0.3)

org.springframework.security:spring-security-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.codehaus.enunciate:enunciate-spring-security-rt =1.20,...

cn.dceast.platform:platform-security-starter (2.2.3), com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.0.114-release) +18 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (>=4.0.1.release, <=4.2.8.release)

org.springframework.security:spring-security-cas MAVEN version =4.0.1.release, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.83-rc1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =0.3.1, =0.3.1, =0.3.2 - net.eulerframework:euler-web-authentication-impl-hibernate 0.3.9 and more Source cves...

cn.dceast.platform:platform-security-starter (2.2.3), com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.0.114-release) +53 more potentially affected by CVE-2019-11272 via org.springframework.security:spring-security-cas (>=3.1.0.release, <=4.2.8.release)

org.springframework.security:spring-security-cas MAVEN version =3.1.0.release, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.83-rc1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =9.4.0.10, =1.0.0, =1.0.3 and more Source cves: CVE-2019-11272 Source advisory: MEND:CVE-2019-11272...

Debian DLA-1790-1 : lemonldap-ng security update

Erratum: bad versions An attack vector was discovered by lemonldap-ng developers. When the SAML or CAS service provider is enable and the administrator has chosen to store SAML/CAS tokens in the session database, an attacker can open an anonymous session to connect to any protected application th...

Debian: Security Advisory (DLA-1790-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1790-1] lemonldap-ng security update

Package : lemonldap-ng Version : 1.3.3-1+deb9u1 CVE ID : CVE-2019-12046 Debian Bug : 928944 Erratum: bad versions An attack vector was discovered by lemonldap-ng developers. When the SAML or CAS service provider is enable and the administrator has chosen to store SAML/CAS tokens in the session...

[SECURITY] [DLA 1791-1] lemonldap-ng security update

Package : lemonldap-ng Version : 1.9.7-3+deb9u1 CVE ID : CVE-2019-12046 Debian Bug : 928944 An attack vector was discovered by the lemonldap-ng developers. When the SAML or CAS service provider is enabled and the administrator has chosen to store the SAML/CAS tokens in the session database, an...

Fedora Update for php-pear-CAS FEDORA-2018-6d62140b89

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...