Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2016-8638

ipsilon: DoS via logging out all open SAML2 sessions

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."

CVSS 3.0 · 9.1 Critical EPSS 2.1% KEV · Not listed
Vendors
Ipsilon Project Redhat
Products
Ipsilon Enterprise Linux
CVE-2015-5217

ipsilon: Input validation flaw in handling of user supplied data

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.

CVSS 2.0 · 4.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Ipsilon Project
Products
Ipsilon
CVE-2015-5301

ipsilon: missing user authorization check when deleting a service provider

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).

CVSS 2.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Ipsilon Project
Products
Ipsilon