Description
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jasig Project php-pear-CAS
1.2.2affected
References
- https://security-tracker.debian.org/tracker/CVE-2012-1105 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1105 ↗
- http://www.openwall.com/lists/oss-security/2012/03/05/7 ↗
- https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLog ↗
- https://www.securityfocus.com/bid/52280 ↗