Security Advisory
CVE-2017-1000071
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to authenticate against an old CAS server.