CVE-2014-5059

Uportal before 4.0.15,4.1.1 doesn't guarantee CAS security context successfully sets principal ID. The fix detects and throws in case where principal UID setting is blocked...