CVE-2017-1000071

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server

published July 13, 2017

CVSS
—
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03513 · 89.1th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server
    cvelistv5