CVE-2010-2795

phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
joachim_fritschiphpcas
𝑥
≤ 1.1.1
joachim_fritschiphpcas
0.2
joachim_fritschiphpcas
0.3
joachim_fritschiphpcas
0.3.1
joachim_fritschiphpcas
0.3.2
joachim_fritschiphpcas
0.4
joachim_fritschiphpcas
0.4.1
joachim_fritschiphpcas
0.4.2
joachim_fritschiphpcas
0.4.3
joachim_fritschiphpcas
0.4.4
joachim_fritschiphpcas
0.4.5
joachim_fritschiphpcas
0.4.6
joachim_fritschiphpcas
0.4.7
joachim_fritschiphpcas
0.4.8
joachim_fritschiphpcas
0.4.9
joachim_fritschiphpcas
0.4.10
joachim_fritschiphpcas
0.4.11
joachim_fritschiphpcas
0.4.12
joachim_fritschiphpcas
0.4.13
joachim_fritschiphpcas
0.4.14
joachim_fritschiphpcas
0.4.15
joachim_fritschiphpcas
0.4.16
joachim_fritschiphpcas
0.4.17
joachim_fritschiphpcas
0.4.18
joachim_fritschiphpcas
0.4.19
joachim_fritschiphpcas
0.4.20
joachim_fritschiphpcas
0.4.21
joachim_fritschiphpcas
0.4.22
joachim_fritschiphpcas
0.4.23
joachim_fritschiphpcas
0.5.0
joachim_fritschiphpcas
0.5.1
joachim_fritschiphpcas
0.6.0
joachim_fritschiphpcas
1.0.0
joachim_fritschiphpcas
1.0.1
joachim_fritschiphpcas
1.1.0
𝑥
= Vulnerable software versions
References