Medium severity · published Dec 5, 2019
CVE-2012-1104
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed
5.3
CVSS
1.7%
EPSS
No
On KEV
Description
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
8.0 · source: NVD
PH
Phpcas · Apereo
1.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1104
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1104
Mailing List
http://www.openwall.com/lists/oss-security/2012/03/05/7
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1104
Release Notes
https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLog
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-1104
Third Party Advisory
https://www.securityfocus.com/bid/52279
More from Phpcas
9.8
CVE-2014-4172
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before…
8.1
CVE-2017-1000071
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server
8.0
CVE-2022-39369
Service Hostname Discovery Exploitation in phpCAS
5.5
CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory
–
CVE-2012-5583
phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows…