CVE-2022-39369

CVE-2022-39369 is a high-severity vulnerability (CVSS 8.0) in phpCAS, an authentication library used by PHP applications to integrate with Central Authentication Service (CAS) servers. The vulnerability allows an attacker to manipulate HTTP host headers, potentially enabling them to authenticate to a service protected by phpCAS using a valid ticket from another authorized service within the same SSO realm. This could lead to unauthorized access to a victim's account if they visit an attacker's website while logged into the CAS server. The attack vector is network-based with low attack complexity, requiring user interaction (UI:R) and leading to high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H). While the vulnerability affects products like Apereo phpCAS and Fedora, its severity is reduced if the CAS server's service registry strictly validates URLs. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a lack of widespread attention.