Ubuntu Security Update USN-6914-1: OCS Inventory vulnerability

[LinuxBot]

Filip Hejsek discovered that the phpCAS library included in OCS Inventory was using HTTP headers to determine the service URL used to validate tickets. A remote attacker could possibly use this issue to gain access to a victim's account.

Continue reading...