CVE-2019-10754

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes…

published September 23, 2019

CVSS
—
EPSS
2%
Percentile
77.9
In the wild
Unconfirmed
What it is

Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01767 · 77.9th percentile
Published
2019-09-23T22:09Z
EPSS history
Timeline
  • 23 SEP 22:09Z
    Multiple classes used within Apereo CAS before release 6.1.0-RC5 makes use of apache commons-lang3 RandomStringUtils for token and ID generation which makes…
    cvelistv5