Apereo CAS - Service Redirection Strategies

Thursday, Oct 31, 2019
1 minute read

This post is relocated to here.

Disclosure of a series of security issues with the Apereo CAS software.

Apereo CAS is shortening the security disclosure grace window.

Disclosure of a series of security issues with the Apereo CAS software.

Disclosure of a series of security issues with the Apereo CAS software.

Disclosure of a security issue with the Apereo CAS software acting itself as an OpenID Connect provider.

Disclosure of a security issue with the Java CAS Client validating JWTs.

An overview of Apereo CAS' ability to register identity providers for external and delegated authentication attempts.

Disclosure of a security issue with the Apereo CAS software using JWT non-interactive authentication.

An overview of the work done on performance.

An overview of Apereo CAS' ability to handle dynamic configuration updates.