Security Advisory
CVE-2012-1105
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner.