PT-2017-19435 · Php · Php-Pear-Cas

Published 2017-08-21 · Updated 2017-08-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions php-pear-CAS (affected versions not specified)

Description A possible authentication bypass was discovered in the validateCAS20 function of php-pear-CAS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2017-0293

Affected Products

Php-Pear-Cas

References · 5

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2THFM2BPR5YGBE42CTAPCAUVZ77UDLYF · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0293 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0293.html · Security Note
• https://github.com/apereo/phpCAS/issues/228 · Note
• https://bugs.mageia.org/show_bug.cgi?id=20722 · Note