central authentication service vulnerabilities and fixes

Recent CVEs affecting central authentication service, with upgrade or downgrade steps. 7 tracked.

Also searched as: centralauthenticationservice.

central authentication service has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-27. Highest priority: CVE-2024-4399 (score 62/100).

• CVE-2025-3986 MEDIUM 4.3 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6
• CVE-2025-3985 LOW 2.7 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6
• CVE-2025-3984 MEDIUM 5.0 DOWNGRADE A vulnerability was found in Apereo CAS 5.2.6 and classified as critical
• CVE-2024-4399 CRITICAL 9.1 MITIGATE The does not validate a parameter before making a request to it, which could allow unauthenticated users to p
• CVE-2024-11209 MEDIUM 6.3 DOWNGRADE A vulnerability was found in Apereo CAS 6.6
• CVE-2024-11208 LOW 3.7 DOWNGRADE A vulnerability was found in Apereo CAS 6.6 and classified as problematic
• CVE-2024-11207 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in Apereo CAS 6.6 and classified as problematic

FAQ

How do I fix central authentication service vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is central authentication service being exploited right now?

None of the tracked central authentication service CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which central authentication service CVE should I patch first?

CVE-2024-4399 currently ranks highest (62/100): The does not validate a parameter before making a request to it, which could allow unauthenticated users to p.

RSS feed for central authentication service · ← Back to latest CVEs