CVE-2012-1105

An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.

• CWE-200

• http://www.openwall.com/lists/oss-security/2012/03/05/7Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1105Issue Tracking, Patch, Third Party Advisory
• https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLogThird Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1105Third Party Advisory
• https://www.securityfocus.com/bid/52280Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2012/03/05/7Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1105Issue Tracking, Patch, Third Party Advisory
• https://gitlab.vsb.cz/kal0178/sixmon/blob/b18bcde090dc38fc968a0b1e38d1dab08b8c369e/web/lib/CAS/CAS-1.3.5/docs/ChangeLogThird Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1105Third Party Advisory
• https://www.securityfocus.com/bid/52280Third Party Advisory, VDB Entry

Published

Dec 5, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1099Cross-site scripting (XSS) vulnerability in actionpack/lib/a…
• CVE-2012-1100Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2…
• CVE-2012-1101systemd 37-1 does not properly handle non-existent services,…5.5
• CVE-2012-1102It was discovered that the XML::Atom Perl module before vers…7.5
• CVE-2012-1103emacs/notmuch-mua.el in Notmuch before 0.11.1, when using th…
• CVE-2012-1104A Security Bypass vulnerability exists in the phpCAS 1.2.2 l…5.3
• CVE-2012-1106The C handler plug-in in Automatic Bug Reporting Tool (ABRT)…
• CVE-2012-1107The analyzeCurrent function in ape/apeproperties.cpp in TagL…
• CVE-2012-1108The parse function in ogg/xiphcomment.cpp in TagLib 1.7 and …
• CVE-2012-1109mwlib 0.13 through 0.13.4 has a denial of service vulnerabil…7.5
• CVE-2012-1110Multiple cross-site scripting (XSS) vulnerabilities in Etano…
• CVE-2012-1111lightdm before 1.0.9 does not properly close file descriptor…