Lucene search
Veracode Vulnerability DatabaseVERACODE:27620HistoryOct 19, 2020 - 7:36 a.m.
Information Disclosure
2020-10-1907:36:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
35.9%
cas-server-support-otp-mfa is vulnerable to information disclosure. The vulnerability exists as the user’s secret key is sent as a GET parameter in an img tag when Google Authenticator is used.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cas-server-support-otp-mfa | le | 5.3.15.1 | |
| cas-server-support-otp-mfa-core | le | 6.2.3 | |
| cas-server-support-otp-mfa-core | le | 6.1.7.1 |
Related
github
github
Improper Authentication in Apereo CAS
2021-08-02 16:47:10
nvd
nvd
CVE-2020-27178
2020-10-16 16:15:11
prion
prion
Authentication flaw
2020-10-16 16:15:00
osv
osv
Improper Authentication in Apereo CAS
2021-08-02 16:47:10
CVE-2020-27178
2020-10-16 16:15:11
cvelist
cvelist
CVE-2020-27178
2020-10-16 15:22:48
cve
cve
CVE-2020-27178
2020-10-16 16:15:11