CVE-2014-2296

XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google…

published July 20, 2018

CVSS
—
EPSS
2%
Percentile
81.0
In the wild
Unconfirmed
What it is

XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google Accounts Integration is enabled, allows remote unauthenticated users to bypass authentication via crafted XML data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02055 · 81.0th percentile
Published
2018-07-20T17:00Z
EPSS history
Timeline
  • 20 JUL 17:00Z
    XML external entity (XXE) vulnerability in java/org/jasig/cas/util/SamlUtils.java in Jasig CAS server before 3.4.12.1 and 3.5.x before 3.5.2.1, when Google…
    cvelistv5