Security Advisory

CVE-2016-8638

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-12 13:00:00

Last updated 2024-08-06 02:27:41

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."

← Browse all CVEs View on cve.org ↗