CVE-2012-1105 is an Information Disclosure vulnerability in Jasig Project php-pear-CAS 1.2.2, affecting various distributions including Debian, Fedora, and Apereo phpCAS. The vulnerability stems from the Central Authentication Service client library insecurely archiving debug log files in the /tmp directory. This allows a local attacker to potentially access sensitive information from these logs. With a CVSS score of 5.5 (Medium), this vulnerability has a low attack complexity and requires local access and low privileges to exploit. The primary impact is a high confidentiality breach, as an attacker could gain unauthorized access to sensitive data within the debug logs. There is no impact on integrity or availability. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.2CPE matchmatch criteria | cpe:2.3:a:apereo:phpcas:1.2.2:*:*:*:*:*:*:* | ||
15CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:* | ||
16CPE matchmatch criteria | cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.