High severity · published Jul 17, 2017
CVE-2017-1000071
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server
8.1
CVSS
3.5%
EPSS
No
On KEV
Description
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpcas · Apereo
1.3.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-1000071
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-1000071
Third Party Advisory
http://www.securityfocus.com/bid/99609
Third Party Advisory
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
Third Party Advisory
https://github.com/Jasig/phpCAS/issues/228
More from Phpcas
9.8
CVE-2014-4172
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before…
8.0
CVE-2022-39369
Service Hostname Discovery Exploitation in phpCAS
5.5
CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory
5.3
CVE-2012-1104
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed
–
CVE-2012-5583
phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows…