Published: 17/07/2017 Updated: 21/11/2024

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apereo phpcas 1.3.4

Debian Bug report logs - #868466 php-cas: CVE-2017-1000071 Package: src:php-cas; Maintainer for src:php-cas is Xavier Guimard <yadd@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 15 Jul 2017 19:09:01 UTC Severity: grave Tags: fixed-upstream, security, upstream Found in version php-cas/ ...

CWE-287 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868466 https://nvd.nist.gov https://www.first.org/epss http://www.securityfocus.com/bid/99609 https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog https://github.com/Jasig/phpCAS/issues/228 http://www.securityfocus.com/bid/99609 https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog https://github.com/Jasig/phpCAS/issues/228

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-1000071

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect