1. Home
  2. CVE Database
  3. CVE-2015-5301
MEDIUM · 5.5

CVE-2015-5301

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to caus...

Vulnerability Description

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).

CVSS Score

5.5

MEDIUM

AV:N/AC:L/Au:S/C:N/I:P/A:P
Confidentiality
NONE
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
Ipsilon ProjectIpsilon0.1.0

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2015-5301?

CVE-2015-5301 is a vulnerability with a CVSS score of 5.5 (MEDIUM). providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to caus...

How severe is CVE-2015-5301?

CVE-2015-5301 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-5301?

Check the references section above for vendor advisories and patch information. Affected products include: Ipsilon Project Ipsilon.