CVE-2017-1000071

—

CVSS 3.0

8.1 high

EPSS

4%p89

Published

Jul 17, 2017 (Jul 17, 2017)

Modified

Jun 17, 2026

Description

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.

Vendors: apereo
Products: phpcas
Weakness: CWE-287
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.