composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-04-24 02:58:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

#1130 CAS authentication security leak when cas_memberof is left empty

Browse Source 
SVN:2.1.0[3684]
This commit is contained in:
Romain Quetiez
2015-08-18 13:42:47 +00:00
parent 96c8ee5e4d
commit 9f1338ee2a
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
core/userrights.class.inc.php
View File

@@ -1303,8 +1303,9 @@ class CAS_SelfRegister implements iSelfRegister
} }
else else
{ {
// No membership required, anybody will pass // No membership: no way to create the user that should exist prior to authentication
$bFound = true; phpCAS::log("User ".phpCAS::getUser().": missing user account in iTop (or iTop badly configured, Cf setting cas_memberof)");
$bFound = false;
} }
if (!$bFound) if (!$bFound)