NVD

Id
26434  
Name
CVE-2015-5217  
Description
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2015-11-17  
Modified Date
2015-11-18  
Seq
2015-5217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
139764 26434 CVE-2015-5217 [oss-security] 20151027 Multiple CVE info for Ipsilon  View
139765 26434 CVE-2015-5217 https://bugzilla.redhat.com/show_bug.cgi?id=1255172  View
139766 26434 CVE-2015-5217 https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.1  View
139767 26434 CVE-2015-5217 https://pagure.io/ipsilon/826e6339441546f596320f3d73304ab5f7c10de6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10631 JVNDB-2015-005951 Ipsilon の Identity Provider サーバの providers/saml2/admin.py におけるサービス運用妨害 (DoS) の脆弱性 Ipsilon の Identity Provider (IdP) サーバの providers/saml2/admin.py は、SAML2 サービスプロバイダ (SP) の所有者の更新に対するパーミッションを適切にチェックしないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-5217 82442 CVE-2015-5217 26434 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005951.html 2015-09-08 2015-11-19 View