[Bug 1131350] CVE-2014-4172 cas-client: Bypass of security constraints via URL parameter injection

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1131350

Kurt Seifried  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |CLOSED
         Resolution|---                         |ERRATA
         Whiteboard|impact=important,public=201 |impact=important,public=201
                   |40811,reported=20140819,sou |40811,reported=20140819,sou
                   |rce=internet,cvss2=5.8/AV:N |rce=internet,cvss2=5.8/AV:N
                   |/AC:M/Au:N/C:P/I:P/A:N,rhev |/AC:M/Au:N/C:P/I:P/A:N,rhev
                   |-m-3/jasperreports-server-p |-m-3/jasperreports-server-p
                   |ro=affected,epp-5/cas-clien |ro=wontfix,epp-5/cas-client
                   |t=affected,jpp-6/cas-client |=affected,jpp-6/cas-client=
                   |=affected,fedora-all/cas-cl |affected,fedora-all/cas-cli
                   |ient=affected,fedora-all/ph |ent=affected,fedora-all/php
                   |p-pear-CAS=notaffected,epel |-pear-CAS=notaffected,epel-
                   |-all/php-pear-CAS=notaffect |all/php-pear-CAS=notaffecte
                   |ed                          |d
        Last Closed|                            |2016-01-22 13:25:50

--- Comment #14 from Kurt Seifried  ---
This issue does not affect JasperReports as used in Red Hat Enterprise
Virtualization Manager, marking wontfix.