PT-2015-6839 · Red Hat · Ipsilon

Patrick Uiterwijk + 1 · Publicado 2015-11-17 · Atualizado 2022-05-17 · CVE-2015-5301

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.1 Ipsilon versions 1.1.x prior to 1.1.1

Description The issue is related to improper permission checking in the providers/saml2/admin.py file of the Identity Provider (IdP) server. This allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).

Recommendations For Ipsilon versions 0.1.0 through 1.0.1, update to version 1.0.2 or later. For Ipsilon versions 1.1.x prior to 1.1.1, update to version 1.1.1 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-5301

GHSA-9QP4-79Q8-58PR

PYSEC-2015-42

Produtos afetados

Ipsilon

Referências · 14

• https://github.com/pypa/advisory-database/tree/main/vulns/ipsilon/PYSEC-2015-42.yaml · Nota
• https://github.com/ipsilon-project/ipsilon · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171076.html · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-9qp4-79q8-58pr · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171052.html · Aviso do Fabricante
• https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5301 · Nota de Segurança
• https://github.com/advisories/GHSA-9qp4-79q8-58pr · Nota
• https://osv.dev/vulnerability/PYSEC-2015-42 · Aviso do Fabricante
• https://fedorahosted.org/ipsilon/wiki/Releases/v1.1.1 · Nota
• https://pagure.io/ipsilon/9dec97c3c83928d231ea10f4160523a13803e594 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171067.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1271530 · Nota
• http://openwall.com/lists/oss-security/2015/10/27/8 · Nota