High severity8.1NVD Advisory· Published Jul 17, 2017· Updated May 13, 2026
CVE-2017-1000071
CVE-2017-1000071
Description
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.securityfocus.com/bid/99609nvdThird Party AdvisoryVDB Entry
- github.com/Jasig/phpCAS/blob/master/docs/ChangeLognvdThird Party Advisory
- github.com/Jasig/phpCAS/issues/228nvdThird Party Advisory
News mentions
0No linked articles in our index yet.