CVE-2023-4612

Summary

CVE-2023-4612 is an Improper Authentication vulnerability affecting Apereo CAS's jakarta.servlet.http.HttpServletRequest.getRemoteAddr method. This issue enables Multi-Factor Authentication bypass, putting versions of CAS up to and including 7.0.0-RC7 at risk. The vendor has not released a patch for this vulnerability, and it is currently unknown if future versions will address the issue. The vendor does not consider it as a vulnerability, leaving affected organizations without a readily available solution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.