CVE-2023-28857 (central_authentication_service)

Apereo CAS is an open source multilingual single sign-on solution for the web. Apereo CAS can be configured to use authentication based on client X509 certificates. These certificates can be provided via TLS handshake or a special HTTP header, such as “ssl_client_certâ€�. When checking the validity of the provided client certificate, X509CredentialsAuthenticationHandler performs check that this certificate is not revoked. To do so, it fetches URLs provided in the “CRL Distribution Pointsâ€� extension of the certificate, which are taken from …

authentication certificate certificates check client cve handshake header http open source sign single single sign-on solution special the web tls web