CVE-2018-1000188

A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...

PT-2018-9357

Name of the Vulnerable Software and Affected Versions Jenkins CAS Plugin versions 1.4.1 and older Description A server-side request forgery issue exists in the CasSecurityRealm.java component, allowing attackers with Overall/Read access to cause the server to send a GET request to a specified URL...

CVE-2018-1000188: Server-Side Request Forgery (SSRF)

A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL...

Server-side request forgery vulnerability in CAS Plugin

A form validation method in GitHub Branch Source Plugin did not check the permission of the user accessing them, allowing anyone with Overall/Read access to Jenkins to cause Jenkins to send a GET request to a specified URL. Additionally, this form validation method did not require POST requests,...

A Slice of 2017 Sofacy Activity

Sofacy, also known as APT28, Fancy Bear, and Tsar Team, is a highly active and prolific APT. From their high volume 0day deployment to their innovative and broad malware set, Sofacy is one of the top groups that we monitor, report, and protect against. 2017 was not any different in this regard. O...

Fixing HPKP with Certificate Constraints

This is the third post in my series on HPKP. In my first post I declared HPKP dead, and in my second post I explored the possibility of fixing it by introducing pin revocation. Today I will consider an entirely different approach to make HPKP much safer, by changing how it’s activated. In my...

SQL Injection

cas-catalog is vulnerable to SQL injection. The vulnerability is possible because it does not sanitize user-provided input for SQL commands, allowing attackers to inject malicious SQL commands leading to the leakage of sensitive information...

Authentication Bypass

apereo/phpCAS is vulnerable to authentication bypass. The bypass happens because it does not check the authentication of XML tag in the ticke while validating a CAS 2.0 ST or PT in validateCAS20 function of source/CAS/Client.php...

Updated php-pear-CAS package fixes security vulnerability

It was discovered that php-pear-CAS contained a possible authentication bypass in validateCAS20...

MGASA-2017-0293 Updated php-pear-CAS package fixes security vulnerability

It was discovered that php-pear-CAS contained a possible authentication bypass in validateCAS20...

PT-2017-19435

Name of the Vulnerable Software and Affected Versions php-pear-CAS affected versions not specified Description A possible authentication bypass was discovered in the validateCAS20 function of php-pear-CAS. Recommendations At the moment, there is no information about a newer version that contains ...

Authentication Bypass

phpCAS is vulnerable to authentication bypasses. When authenticating against older CAS servers, a malicious user can bypass authentication by injecting xml tags into the ticket...

CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

UBUNTU-CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

Authentication flaw

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

CVE-2017-1000071: Improper Authentication

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

Fedora 26 : php-pear-CAS (2017-2f3096ba16)

Changes in version 1.3.5 - Security Fixes : - Fix possible authentication bypass in validateCAS20 228 Gregory Boddin - Bug Fixes : - Fix file permissions non-executable 177 Remi Collet - Fixed translations Greek and Japanese 192 ikari7789 - Fix errors under phpdbg 204 MasonM - Fix logout...

CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

Credential Sniffing

Moodle is vulnerable to credential sniffing. The multi-authentication feature in the Central Authentication Service cas of Moodle doesn't use HTTPS, allowing attackers to find credentials by sniffing the network...