PT-2017-19435 · Php · Php-Pear-Cas

Publicado 2017-08-21 · Atualizado 2017-08-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions php-pear-CAS (affected versions not specified)

Description A possible authentication bypass was discovered in the validateCAS20 function of php-pear-CAS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2017-0293

Produtos afetados

Php-Pear-Cas

Referências · 5

• https://github.com/apereo/phpCAS/issues/228 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2THFM2BPR5YGBE42CTAPCAUVZ77UDLYF · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=20722 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0293 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2017-0293.html · Nota de Segurança