CyberSecBulletin

Casgate vulnerabilities

We track 1 vulnerability in Casgate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 31, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Casgate vulnerabilities

  • 9.8 Critical severity

    casgate: Improper Authorization

    CVE-2024-36108Casgate

    casgate is an Open Source Identity and Access Management system. In affected versions `casgate` allows remote unauthenticated attacker to obtain sensitive information via GET request to an API endpoint. This issue has been addressed in PR #201 which is pending