CVE-2014-4172

Опубликовано: 24 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1131350
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95673
Third Party Advisory
VDB Entry
https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d
Patch
Third Party Advisory
https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814
Patch
Third Party Advisory
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
Release Notes
Third Party Advisory
https://github.com/Jasig/phpCAS/pull/125
Third Party Advisory
https://issues.jasig.org/browse/CASC-228
Third Party Advisory
https://www.debian.org/security/2014/dsa-3017.en.html
Third Party Advisory
https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1131350
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95673
Third Party Advisory
VDB Entry
https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d
Patch
Third Party Advisory
https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814
Patch
Third Party Advisory
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
Release Notes
Third Party Advisory
https://github.com/Jasig/phpCAS/pull/125
Third Party Advisory
https://issues.jasig.org/browse/CASC-228
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apereo:.net_cas_client:*:*:*:*:*:*:*:*

Версия до 1.0.2 (исключая)

cpe:2.3:a:apereo:java_cas_client:*:*:*:*:*:*:*:*

Версия до 3.3.2 (исключая)

cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*

Версия до 1.3.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.06057

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2014-4172

CVSS3: 9.8

ubuntu

больше 6 лет назад

CVE-2014-4172

redhat

около 12 лет назад

CVE-2014-4172

CVSS3: 9.8

debian

больше 6 лет назад

A URL parameter injection vulnerability was found in the back-channel ...

GHSA-9fc5-q25c-r2wr

CVSS3: 9.8

github

около 4 лет назад

Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

EPSS

Процентиль: 93%

0.06057

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74