Authentication Bypass

apereo/phpCAS is vulnerable to authentication bypass. The bypass happens because it does not check the authentication of XML tag in the ticke while validating a CAS 2.0 ST or PT in validateCAS20 function of source/CAS/Client.php...

Jasig phpCAS Authentication Bypass Vulnerability

Jasig phpCAS is a British company Jasig ITS Centralized Authentication Service Central Authentication Service PHP client development kit . An authentication bypass vulnerability exists in the 'validateCAS20' function in Jasig phpCAS version 1.3.4. An attacker can exploit this vulnerability to...

DEBIAN-CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server...