CVE-2017-1000071

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.

Metrics

CVSS 3.0 8.1/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Jul 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10000729.8Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modification of unexpected mem CVE-2017-10000739.8Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.CVE-2017-10000749.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.CVE-2017-10000759.8Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function CVE-2017-10000786.1Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration CVE-2017-10000797.5Linux foundation ONOS 1.9.0 is vulnerable to a DoS.CVE-2017-10000807.5Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.CVE-2017-10000819.8Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.CVE-2017-10000829.8systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with r CVE-2017-10000837.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary com CVE-2017-10000846.5Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication i CVE-2017-10000856.5Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This func