CAS Server 3.5.2 LDAP Authentication Bypass

CAS Server version 3.5.2 allows remote attackers to bypass LDAP authentication via crafted wildcards.