1 matches found
Credentials Replay
cas-client-core is vulnerable to credentials replay attacks. The cached assertions in CasLoginModulelogout method are not destroyed upon Logout, allowing for credentials to be replayed...