CVE-2020-27178
Description
Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret keys with Google Authenticator for multifactor authentication.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.225
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core 6.1.7.2 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core 5.3.16 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core 6.2.4 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp 5.3.16 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp 6.1.7.2 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp 6.2.4 | Windows |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core for Linux 6.1.7.2 | Linux |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core for Linux 5.3.16 | Linux |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo-cas-server-support-otp-mfa-core for Linux 6.2.4 | Linux |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp for Linux 5.3.16 | Linux |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp for Linux 6.1.7.2 | Linux |
| Vulnerabilities CVE-2020-27178 are fixed in Apereo - cas-server-webapp for Linux 6.2.4 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234