Vulnerability Description
A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ipsilon Project | Ipsilon | 1.0.0 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2016-2809.html
- http://www.securityfocus.com/bid/94439Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638Issue TrackingThird Party Advisory
- https://ipsilon-project.org/advisory/CVE-2016-8638.txtVendor Advisory
- https://ipsilon-project.org/release/2.1.0.html
- https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461cPatchVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2016-2809.html
- http://www.securityfocus.com/bid/94439Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638Issue TrackingThird Party Advisory
- https://ipsilon-project.org/advisory/CVE-2016-8638.txtVendor Advisory
- https://ipsilon-project.org/release/2.1.0.html
- https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461cPatchVendor Advisory
FAQ
What is CVE-2016-8638?
CVE-2016-8638 is a vulnerability with a CVSS score of 9.1 (CRITICAL). A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related t...
How severe is CVE-2016-8638?
CVE-2016-8638 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-8638?
Check the references section above for vendor advisories and patch information. Affected products include: Ipsilon Project Ipsilon.