Approved changes feed: RSS · Atom

cpe:2.3:a:apereo:phpcas:1.3.4:*:*:*:*:*:*:*

part: a version: 1.3.4 update: *

VendorApereo (497abf49-80d7-5c5f-927e-22e0814c4740)
ProductPhpcas (8f0cb0b6-8c9e-5263-b669-ef6618167b7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ugaportal/phpcas purl2cpe 2026-06-01 10:13:17.548223
pkg:github/apereo/phpcas purl2cpe 2026-06-01 10:13:17.548224

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000071 vulnerable 2026-06-08 05:08:33.785479 Details available
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T21:53:06.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.