Vulnerabilities

TI-2016-07100 CVE-2016-8638 · GHSA-376m-3rm2-9jm6

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0…

MEDIUM 43

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02136 Published 2017-07-12 Fixed in 2.0.2, 1.2.1 +2 CWE-384

TI-2015-04456 CVE-2015-5301 · GHSA-9qp4-79q8-58pr

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…

LOW 28

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of servic…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01493 Published 2015-11-17 Partial fix · 1.0.2, 1.2.0 CWE-264

TI-2015-04379 CVE-2015-5217 · GHSA-6875-ff47-r6p6

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…

LOW 21

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.013 Published 2015-11-17 Partial fix · 1.2.0 CWE-264

Vulnerabilities

Filters

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0…

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before…