Ipsilon Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ipsilon Project records in CISA KEV

No Ipsilon Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ipsilon 3 records MEDIUM

Records

3 records

TI-2016-07100 CVE-2016-8638 · GHSA-376m-3rm2-9jm6

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0…

MEDIUM 43

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02136 Published 2017-07-12 Fixed in 2.0.2, 1.2.1 +2 CWE-384

TI-2015-04456 CVE-2015-5301 · GHSA-9qp4-79q8-58pr

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…

LOW 28

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of servic…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01493 Published 2015-11-17 Partial fix · 1.0.2, 1.2.0 CWE-264

TI-2015-04379 CVE-2015-5217 · GHSA-6875-ff47-r6p6

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…

LOW 21

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.013 Published 2015-11-17 Partial fix · 1.2.0 CWE-264

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0