Lucene search
Gentoo FoundationMGASA-2022-0432HistoryNov 19, 2022 - 1:50 a.m.
Updated php-pear-CAS packages fix security vulnerability
2022-11-1901:50:51
Gentoo Foundation
advisories.mageia.org
99
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.6%
This update fixes a vulnerability in this lib. For details see refererenced github advisory.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | php-pear-cas | < 1.6.0-1 | php-pear-CAS-1.6.0-1.mga8 |
Related
github
github
phpCAS vulnerable to Service Hostname Discovery Exploitation
2022-11-01 18:11:07
fedora
fedora
[SECURITY] Fedora 35 Update: php-pear-CAS-1.6.0-1.fc35
2022-11-11 00:50:48
[SECURITY] Fedora 37 Update: php-pear-CAS-1.6.0-1.fc37
2022-11-10 22:58:11
[SECURITY] Fedora 36 Update: php-pear-CAS-1.6.0-1.fc36
2022-11-11 01:16:13
debian
debian
[SECURITY] [DLA 3486-1] ocsinventory-server update for php-cas
2023-07-08 14:06:49
[SECURITY] [DLA 3485-1] php-cas security update
2023-07-08 14:04:08
osv
osv
phpCAS vulnerable to Service Hostname Discovery Exploitation
2022-11-01 18:11:07
CVE-2022-39369
2022-11-01 17:15:10
php-cas - security update
2023-07-08 00:00:00
gitlab
gitlab
phpCAS vulnerable to Service Hostname Discovery Exploitation
2022-11-01 00:00:00
veracode
veracode
Privilege Escalation
2022-11-02 04:37:43
openvas
openvas
Debian: Security Advisory (DLA-3485-1)
2023-07-10 00:00:00
Debian: Security Advisory (DLA-3486-1)
2023-07-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0432)
2022-11-21 00:00:00
nessus
nessus
Debian DLA-3486-1 : ocsinventory-server - LTS security update
2023-07-20 00:00:00
Debian DLA-3485-1 : php-cas - LTS security update
2023-07-08 00:00:00
Fedora 36 : php-pear-CAS (2022-37c2d26f59)
2022-12-22 00:00:00
cvelist
cvelist
CVE-2022-39369 Service Hostname Discovery Exploitation in phpCAS
2022-11-01 00:00:00
nvd
nvd
CVE-2022-39369
2022-11-01 17:15:10
debiancve
debiancve
CVE-2022-39369
2022-11-01 17:15:10
prion
prion
Design/Logic Flaw
2022-11-01 17:15:00
ubuntucve
ubuntucve
CVE-2022-39369
2022-11-01 00:00:00
cve
cve
CVE-2022-39369
2022-11-01 17:15:10
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
65.6%
Related for MGASA-2022-0432