Jasig Sårbarheter

Tidslinje

Typ

Not Defined8
Programming Language Software2

Produkt

Jasig phpCAS6
Jasig uPortal2
Jasig Java CAS Client1
Jasig .NET CAS Client1
Jasig php-pear-CAS1

Åtgärd

Official Fix9
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Utnyttjbarhet

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

Åtkomstvektor

Not Defined0
Physical0
Local1
Adjacent0
Network9

Autentisering

Not Defined0
High0
Low1
None9

Användarinteraktion

Not Defined0
Required2
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤51
≤62
≤74
≤81
≤91
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤62
≤73
≤81
≤91
≤101

VulDB

≤10
≤20
≤30
≤40
≤51
≤63
≤74
≤81
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤92
≤101

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k1
<2k7
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja idag

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (6): .NET CAS Client (1), CAS Server (1), Java CAS Client (1), php-pear-CAS (1), phpCAS (6), uPortal (2)

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
21/04/20238.58.4Jasig Java CAS Client/.NET CAS Client/phpCAS Ticket Validation AbstractUrlBasedTicketValidator.java privilegier eskaleringProgramming Language SoftwareNot DefinedOfficial Fix0.017000.05CVE-2014-4172
05/12/20195.45.2Jasig php-pear-CAS Authentication Service tmp setCacheTimesForAuthRecheck informationsgivningProgramming Language SoftwareNot DefinedOfficial Fix0.000470.00CVE-2012-1105
20/07/20187.57.2Jasig CAS Server Google Account SamlUtils.java XML External EntityOkändNot DefinedOfficial Fix0.004380.00CVE-2014-2296
17/07/20176.86.6Jasig phpCAS validateCAS20 privilegier eskaleringOkändNot DefinedNot Defined0.004450.00CVE-2017-1000071
06/06/20146.56.2Jasig phpCAS svag krypteringOkändNot DefinedOfficial Fix0.000640.02CVE-2012-5583
29/05/20146.36.0Jasig uPortal privilegier eskaleringOkändNot DefinedOfficial Fix0.002180.07CVE-2014-3417
29/05/20149.89.4Jasig uPortal privilegier eskaleringOkändNot DefinedOfficial Fix0.002180.00CVE-2014-3416
07/10/20106.56.2Jasig phpCAS client.php callback kataloggenomgångOkändNot DefinedOfficial Fix0.010740.00CVE-2010-3692
07/10/20105.14.9Jasig phpCAS privilegier eskaleringOkändNot DefinedOfficial Fix0.000440.00CVE-2010-3691
07/10/20104.34.1Jasig phpCAS client.php callback cross site scriptingOkändNot DefinedOfficial Fix0.003580.02CVE-2010-3690

◂ TidigareÖversiktNästa ▸

Do you know our Splunk app?

Download it now for free!