Vulnerability in Apereo Phpcas

CVE-2010-3691

PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.

EPSS: 0.004 (27.7th percentile) — read the EPSS interpretation.

Affected products

  • Apereo Phpcas — versions 0.4.22, 0.3.1, 0.4.19
  • N/a — versions n/a

Weakness classification (CWE)

References