CVE-2015-5217 in Identity Provider Serverinformation

Résumé

par MITRE

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

01/07/2015

Divulgation

17/11/2015

Modérer

accepté

Entrée

VDB-79229

CPE

prêt

CWE

CWE-264 (confirmé)

CVSS

4.3 (VulDB)

EPSS

0.01300

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-5217
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-5217
CVE Details	https://www.cvedetails.com/cve/CVE-2015-5217/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!