high8.1
CVE-2017-1000071
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
Impact
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apereo | Phpcas | Version 1.3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99609
- https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
- https://github.com/Jasig/phpCAS/issues/228
- http://www.securityfocus.com/bid/99609
- https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
- https://github.com/Jasig/phpCAS/issues/228