CVE-2012-1105 An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file....
MediumCVSS 5.5
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Jasig Project php-pear-CAS | = 1.2.2 | No fix listed |
| apereo/phpcas | = 1.2.2 | No fix listed |
| fedoraproject fedora | = 15 | No fix listed |
| fedoraproject fedora | = 16 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- security-tracker.debian.org third-party-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- www.openwall.com mailing-list third-party-advisory
- gitlab.vsb.cz third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry