Package · Maven

org.apereo.cas:cas-server-core-services-authentication

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.1

CVE-2019-10754

Use of Insufficiently Random Values in Apereo CAS

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong.

org.apereo.cas:cas-server-support-oidc org.apereo.cas:cas-server-support-oauth-core-api org.apereo.cas:cas-server-core-services-authentication org.apereo.cas:cas-server-support-simple-mfa Maven

Sep 23, 2019