Release Announcement: CAS Security Patches

Jérôme LELEU

unread,

Oct 15, 2020, 5:32:17 AM10/15/20

to CAS Community, CAS Developer, cas-an...@apereo.org

Hi,

Please see: https://apereo.github.io/2020/10/14/gauthvuln/

Thanks.

Best regards,

Jérôme

Mike Osterman

unread,

Oct 15, 2020, 4:13:43 PM10/15/20

to Jérôme LELEU, CAS Community, CAS Developer, cas-an...@apereo.org

Thanks, Jérôme!

Based on the opening statement of "affects the handling of secret keys with Google Authenticator for multifactor authentication" is it safe to assume that this only affects CAS implementations that use Google Authenticator for MFA (as opposed to Duo or another MFA implementation)?

Thank you,

Mike

--
You received this message because you are subscribed to the Google Groups "CAS Developer" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-dev+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-dev/CAP279Lw1zqtJP90kD-6ibeFCf4qJMZvLSjsWOBicp11cA9EchQ%40mail.gmail.com.

Jérôme LELEU

unread,

Oct 16, 2020, 2:20:06 AM10/16/20

to Mike Osterman, CAS Community, CAS Developer, cas-an...@apereo.org

Hi,

Yes, exactly, this only affects the Google Authenticator MFA support.

Thanks.

Best regards,

Jérôme

Reply all

Reply to author

Forward