CVE-2010-3691
CVE-2010-3691 is a low-severity vulnerability in Apereo Phpcas with a CVSS 2.0 base score of 3.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-59.
Key facts
- Severity: Low (CVSS 2.0 base score 3.3)
- EPSS exploit prediction: 0% (27th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-59
- Affected product: Apereo Phpcas
- Published:
- Last modified:
Description
PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.
Frequently asked questions
- What is CVE-2010-3691?
- PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.
- How severe is CVE-2010-3691?
- CVE-2010-3691 has a CVSS 2.0 base score of 3.3, rated low severity.
- Is CVE-2010-3691 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (27th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2010-3691?
- CVE-2010-3691 primarily affects Apereo Phpcas. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2010-3691?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2010-3691 published?
- CVE-2010-3691 was published on 2010-10-07 and last updated on 2026-06-16.
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html
- http://secunia.com/advisories/41878
- http://secunia.com/advisories/42149
- http://secunia.com/advisories/42184
- http://secunia.com/advisories/43427
- http://www.debian.org/security/2011/dsa-2172
- http://www.openwall.com/lists/oss-security/2010/09/29/6
- http://www.openwall.com/lists/oss-security/2010/10/01/2
- http://www.openwall.com/lists/oss-security/2010/10/01/5
- http://www.securityfocus.com/bid/43585
- http://www.vupen.com/english/advisories/2010/2705
- http://www.vupen.com/english/advisories/2010/2909
- http://www.vupen.com/english/advisories/2011/0456
- https://developer.jasig.org/source/changelog/jasigsvn?cs=21538
- https://forge.indepnet.net/projects/glpi/repository/revisions/12601
- https://issues.jasig.org/browse/PHPCAS-80
Affected products (30)
- cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.13:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.14:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.15:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.16:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.17:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.18:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.19:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.20:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.21:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.22:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.4.23:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apereo:phpcas:1.1.1:*:*:*:*:*:*:*
More vulnerabilities in Apereo Phpcas
- CVE-2014-4172 — Critical (CVSS 9.8): A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in…
- CVE-2017-1000071 — High (CVSS 8.1): Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to…
- CVE-2022-39369 — High (CVSS 8.0): phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central…
- CVE-2010-3692 — Medium (CVSS 6.4): Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is…
- CVE-2012-5583 — Medium (CVSS 5.8): phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or…
- CVE-2012-1105 — Medium (CVSS 5.5): An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory.…
All CVEs affecting Apereo Phpcas →
Other CWE-59 (Improper Link Resolution Before File Access (Link Following)) vulnerabilities
- CVE-2024-37143 — Critical (CVSS 10.0): Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM…
- CVE-2024-28189 — Critical (CVSS 10.0): Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file…
- CVE-2024-28185 — Critical (CVSS 10.0): Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the…
- CVE-2022-22995 — Critical (CVSS 10.0): The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of…
- CVE-2014-4480 — Critical (CVSS 10.0): Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows…
- CVE-2002-2374 — Critical (CVSS 10.0): Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use…
Browse all CWE-59 (Improper Link Resolution Before File Access (Link Following)) vulnerabilities →