CVE-2014-4172

Опубликовано: 24 янв. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the (1) service parameter to validation/AbstractUrlBasedTicketValidator.java or (2) pgtUrl parameter to validation/Cas20ServiceTicketValidator.java.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1131350
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95673
Third Party Advisory
VDB Entry
https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d
Patch
Third Party Advisory
https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814
Patch
Third Party Advisory
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
Release Notes
Third Party Advisory
https://github.com/Jasig/phpCAS/pull/125
Third Party Advisory
https://issues.jasig.org/browse/CASC-228
Third Party Advisory
https://www.debian.org/security/2014/dsa-3017.en.html
Third Party Advisory
https://www.mail-archive.com/cas-user%40lists.jasig.org/msg17338.html
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/137182.html
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759718
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1131350
Issue Tracking
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95673
Third Party Advisory
VDB Entry
https://github.com/Jasig/dotnet-cas-client/commit/f0e030014fb7a39e5f38469f43199dc590fd0e8d
Patch
Third Party Advisory
https://github.com/Jasig/java-cas-client/commit/ae37092100c8eaec610dab6d83e5e05a8ee58814
Patch
Third Party Advisory
https://github.com/Jasig/phpCAS/blob/master/docs/ChangeLog
Release Notes
Third Party Advisory
https://github.com/Jasig/phpCAS/pull/125
Third Party Advisory
https://issues.jasig.org/browse/CASC-228
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apereo:.net_cas_client:*:*:*:*:*:*:*:*

Версия до 1.0.2 (исключая)

cpe:2.3:a:apereo:java_cas_client:*:*:*:*:*:*:*:*

Версия до 3.3.2 (исключая)

cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*

Версия до 1.3.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06742

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74

Связанные уязвимости

CVE-2014-4172

CVSS3: 9.8

ubuntu

около 6 лет назад

CVE-2014-4172

redhat

больше 11 лет назад

CVE-2014-4172

CVSS3: 9.8

debian

около 6 лет назад

A URL parameter injection vulnerability was found in the back-channel ...

GHSA-9fc5-q25c-r2wr

CVSS3: 9.8

github

больше 3 лет назад

Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability

EPSS

Процентиль: 91%

0.06742

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-74