GHSA-MVWQ-HCRJ-F5X9 Apereo CAS has inefficient regular expression complexity

A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\core\cas-server-core-configuration-metadata-repository\src\main\java\org\apereo\cas\metadata\rest\CasConfigurationMetadataServerController.java. The...

CVE-2025-3986 Apereo CAS CasConfigurationMetadataServerController.java redos

A vulnerability was found in Apereo CAS 5.2.6. It has been declared as problematic. This vulnerability affects unknown code of the file cas-5.2.6\core\cas-server-core-configuration-metadata-repository\src\main\java\org\apereo\cas\metadata\rest\CasConfigurationMetadataServerController.java. The...

Apereo CAS security vulnerabilities

Apereo CAS is a web-based enterprise multilingual single sign-on solution from Apereo open source. A security vulnerability exists in Apereo CAS version 5.2.6, which originates from the file cas-5.2.6corecas-server-core-configuration-metadata-repositorysrcmainjavaorgapereocasmetadata Parameter Na...

org.kodein.di:kodein-di-framework-ktor-server-controller-jvm (>=7.6.0, <=7.11.0), org.kodein.di:kodein-di-framework-ktor-server-jvm (>=7.6.0, <=7.11.0) potentially affected by CVE-2022-38180 via io.ktor:ktor (1.5.4)

io.ktor:ktor MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ktor:ktor and may be impacted: - org.kodein.di:kodein-di-framework-ktor-server-controller-jvm =7.6.0, =7.6.0, =7.11.0 Source cves: CVE-2022-38180 Source advisory:...

org.kodein.di:kodein-di-framework-ktor-server-controller-jvm (>=6.2.0, <=7.1.0), org.kodein.di:kodein-di-framework-ktor-server-jvm (>=6.2.0, <=7.1.0) potentially affected by CVE-2022-38180 via io.ktor:ktor (1.1.1)

io.ktor:ktor MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ktor:ktor and may be impacted: - org.kodein.di:kodein-di-framework-ktor-server-controller-jvm =6.2.0, =6.2.0, =7.1.0 Source cves: CVE-2022-38180 Source advisory:...

org.kodein.di:kodein-di-framework-ktor-server-controller-jvm (>=6.2.0, <=7.1.0), org.kodein.di:kodein-di-framework-ktor-server-jvm (>=6.2.0, <=7.1.0) potentially affected by CVE-2022-38179 via io.ktor:ktor (1.1.1)

io.ktor:ktor MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ktor:ktor and may be impacted: - org.kodein.di:kodein-di-framework-ktor-server-controller-jvm =6.2.0, =6.2.0, =7.1.0 Source cves: CVE-2022-38179 Source advisory:...

org.kodein.di:kodein-di-framework-ktor-server-controller-jvm (>=6.2.0, <=7.11.0), org.kodein.di:kodein-di-framework-ktor-server-jvm (>=6.2.0, <=7.11.0) potentially affected by CVE-2022-38180 via io.ktor:ktor (>=1.1.1, <=1.5.4)

io.ktor:ktor MAVEN version =1.1.1, =6.2.0, =6.2.0, =7.11.0 Source cves: CVE-2022-38180 Source advisory: MEND:CVE-2022-38180...

IBM Lotus Domino Server Controller - Authentication Bypass

IBM Lotus Domino Server Controller - Authentication Bypass...

IBM Lotus Domino Cookie File Authentication Bypass Vulnerability

IBM Lotus Domino Server is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authentication flaw

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the...

CVE-2011-1519

Summary: CVE-2011-1519 affects IBM Lotus Domino Server/Controller (7.x–8.x). The vulnerability enables authentication bypass by placing a UNC share pathname in the COOKIEFILE field, enabling remote attackers to bypass login and potentially execute arbitrary code. Public writeups and exploits (e.g...

CVE-2011-1519: Improper Authentication

The remote console in the Server Controller in IBM Lotus Domino 7.x and 8.x verifies credentials against a file located at a UNC share pathname specified by the client, which allows remote attackers to bypass authentication, and consequently execute arbitrary code, by placing this pathname in the...