CVE-2012-1105: An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp...

Security readout for executives and security teams

CVE-2012-1105 is an information disclosure issue in Jasig php-pear-CAS 1.2.2. The CAS client library handled archived debug log files insecurely in /tmp, which could expose authentication-related diagnostic data. The public bundle does not provide CVSS scoring, confirmed exploitation, or detailed remediation text. Most likely exposure is legacy PHP applications using Jasig php-pear-CAS 1.2.2, especially where debug logging is enabled or archived files remain in /tmp. The bundle does not identify other affected versions, operating systems, or packaged distributions beyond the referenced advisories. Prioritize as a legacy information disclosure cleanup item unless the library protects high-value authentication workflows or debug logs contain sensitive data. Lack of exploitation evidence lowers urgency, but authentication-adjacent logs deserve prompt validation. Mitigation focus: Inventory applications for Jasig php-pear-CAS 1.2.2 usage.; Check Jasig, Debian, and Red Hat guidance for fixed package details.; Avoid relying on affected debug log archiving until guidance is applied..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.