phpCAS

ソフト名：phpCAS 1.1/1.1 RC7/1.1.1
回避策：PHPCAS-61, PHPCAS-67にて対応
脆弱性：セッションの乗っ取り, XSS, 認証資格情報の奪取
ソース：https://wiki.jasig.org/display/CASC/phpCAS
https://issues.jasig.org/browse/PHPCAS-61
https://issues.jasig.org/browse/PHPCAS-67
http://www.securityfocus.com/bid/42160
http://www.securityfocus.com/bid/42162
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2795
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2796
http://secunia.com/advisories/40845
CVE：CVE-2010-2795, CVE-2010-2796
危険性：Medium Risk