Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:47 a.m.1 views

CVE-2024-36108

casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...

9.8CVSS9.5AI score0.00068EPSS
Exploits0References1
Veracode
Veracode
added 2024/06/05 6:39 a.m.11 views

Authentication Bypass

github.com/casgate/casgate is vulnerable to Authentication Bypass. The vulnerability is due to improper authorization checks using the id parameter in GET requests, which allows attackers to bypass authentication and access sensitive information remotely without authorization...

9.8CVSS6.8AI score0.00068EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/05/31 3:15 p.m.7 views

CVE-2024-36108

casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...

9.8CVSS9.6AI score0.00068EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/31 2:37 p.m.17 views

CVE-2024-36108 Multiple Broken Function-Level Authorization vulnerabilities in casgate

casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...

9.8CVSS9.6AI score0.00068EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/31 2:37 p.m.8 views

CVE-2024-36108 Multiple Broken Function-Level Authorization vulnerabilities in casgate

casgate is an Open Source Identity and Access Management system. In affected versions casgate allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR 201 which is pending merge. An attacker could use id paramet...

9.8CVSS7AI score0.00068EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.2 views

CasGate Security Vulnerability

CasGate is an open source identity and access management software from the CasGate project. A security vulnerability exists in versions of CasGate prior to 0.1.0, which stems from a vulnerability that allows an unauthenticated, remote attacker to obtain sensitive information via a GET request to ...

9.8CVSS6.5AI score0.00068EPSS
Exploits0References3
Rows per page
Query Builder