phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
BID:99609
Info
phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
| Bugtraq ID: | 99609 |
| Class: | Access Validation Error |
| CVE: |
CVE-2017-1000071 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 17 2017 12:00AM |
| Updated: | Jul 17 2017 12:00AM |
| Credit: | Dau Huy Ngoc from Deloitte France. |
| Vulnerable: |
Moodle Moodle 3.1.4 Moodle Moodle 3.1.3 Moodle Moodle 3.1.2 Moodle Moodle 3.1.1 Moodle Moodle 3.3 Moodle Moodle 3.2.3 Moodle Moodle 3.2.2 Moodle Moodle 3.2.1 Moodle Moodle 3.2 Moodle Moodle 3.1.6 Moodle Moodle 3.1.5 Moodle Moodle 3.1 Jasig phpCAS 1.3.4 |
| Not Vulnerable: |
Moodle Moodle 3.3.1 Moodle Moodle 3.2.4 Moodle Moodle 3.1.7 |
Discussion
phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
phpCAS is prone to a authentication-bypass vulnerability.
An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks.
phpCAS 1.3.4 is vulnerable; prior versions may also be affected.
phpCAS is prone to a authentication-bypass vulnerability.
An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks.
phpCAS 1.3.4 is vulnerable; prior versions may also be affected.
Exploit / POC
phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
phpCAS CVE-2017-1000071 Authentication Bypass Vulnerability
References:
References: