Authentication Bypass

apereo/phpCAS is vulnerable to authentication bypass. The bypass happens because it does not check the authentication of XML tag in the ticke while validating a CAS 2.0 ST or PT in validateCAS20 function of source/CAS/Client.php...

PT-2017-19435

Name of the Vulnerable Software and Affected Versions php-pear-CAS affected versions not specified Description A possible authentication bypass was discovered in the validateCAS20 function of php-pear-CAS. Recommendations At the moment, there is no information about a newer version that contains ...

Jasig phpCAS Authentication Bypass Vulnerability

Jasig phpCAS is a British company Jasig ITS Centralized Authentication Service Central Authentication Service PHP client development kit . An authentication bypass vulnerability exists in the 'validateCAS20' function in Jasig phpCAS version 1.3.4. An attacker can exploit this vulnerability to...

DEBIAN-CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

CVE-2017-1000071: Improper Authentication

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...

PT-2017-10778

Name of the Vulnerable Software and Affected Versions Jasig phpCAS version 1.3.4 Description The issue concerns an authentication bypass in the validateCAS20 function. This occurs when Jasig phpCAS is configured to authenticate against an old CAS server. Recommendations For Jasig phpCAS version...