QwikSec

Security Database

CVE

CWE

Training

CVE-2023-4612

Published: Nov 9, 2023

Modified: Feb 26, 2025

PUBLISHED

Description

Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there is no patch, and the vendor does not treat it as a vulnerability.

Vendor	Product	Versions
Apereo Foundation	CAS	affected `0 - <= 7.0.0-RC7`

Weaknesses (CWE)

References

https://cert.pl/posts/2023/11/CVE-2023-4612/

third-party-advisory

https://cert.pl/en/posts/2023/11/CVE-2023-4612/

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.