MOOLE SCAContinuous visibility into open-source risk

MOOLE Container SecurityEnd-to-end container defense across the SDLC

MOOLE SASTStatic application security testing for source code

CVE-2010-2795

Security Operations for
Modern Software

MOOLE

Our goal is simple yet ambitious: to deliver an experience where world-class security feels effortless, empowering, and deeply human.

Products

SCA
Container Security
SAST
Vulnerability Database

Resources

The Signal
Moole Field Notes
The Moole Runbook
FAQs
Newsroom
The Zero Day Dictionary

Company

About Us
Use Cases
Careers
Contact Us
Trust Center

Connect

© 2026 MOOLE, Inc. All rights reserved.

Vulnerability Database
CVE-2010-2795

CVE-2010-2795

phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.

Published Bysecalert@redhat.com

Published DateAug 05, 2010, 18:17

Weakness Type (CWE):CWE-20

CVSS Metrics

Base Score

4

Vector String

AV:N/AC:L/Au:S/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html
http://secunia.com/advisories/40845
http://secunia.com/advisories/41240
http://secunia.com/advisories/42149
http://secunia.com/advisories/42184
http://secunia.com/advisories/43427
http://www.debian.org/security/2011/dsa-2172
http://www.securityfocus.com/bid/42162
http://www.vupen.com/english/advisories/2010/2234
http://www.vupen.com/english/advisories/2010/2261
http://www.vupen.com/english/advisories/2010/2909
http://www.vupen.com/english/advisories/2011/0456
https://exchange.xforce.ibmcloud.com/vulnerabilities/60894
https://forge.indepnet.net/projects/glpi/repository/revisions/12601
https://issues.jasig.org/browse/PHPCAS-61
https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog

Weakness Type (CWE):CWE-20

CVSS Metrics

Base Score

4

Vector String

AV:N/AC:L/Au:S/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE