Approved changes feed: RSS · Atom

cpe:2.3:a:apereo:phpcas:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorApereo (497abf49-80d7-5c5f-927e-22e0814c4740)
ProductPhpcas (8f0cb0b6-8c9e-5263-b669-ef6618167b7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/ugaportal/phpcas purl2cpe 2026-06-01 10:13:17.548204
pkg:github/apereo/phpcas purl2cpe 2026-06-01 10:13:17.548205

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1105 vulnerable 2026-06-08 05:00:47.484569 Details available
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
Published: 2019-12-05T18:26:36.000Z
Updated: 2024-08-06T18:45:27.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1104 vulnerable 2026-06-08 05:00:47.483132 Details available
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
Published: 2019-12-05T17:49:19.000Z
Updated: 2024-08-06T18:45:27.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.