CVE-2017-1000071

概要

参考情報

• securityfocus.com/bid/99609 · Third Party Advisory
• Jasig/phpCAS · Third Party Advisory
• Jasig/phpCAS · Third Party Advisory

phpcas のその他の脆弱性

• CVE-2022-39369高 8.0phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) ser…
• CVE-2014-4172緊急 9.8A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client be…
• CVE-2012-1105中 5.5An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentica…
• CVE-2012-1104中 5.3A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
• CVE-2012-5583中 5.8phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field…