Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2016-8638
PUBLISHED
More InfoOfficial Page
Assigner-redhat
Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749
View Known Exploited Vulnerability (KEV) details
Published At-12 Jul, 2017 | 13:00
Updated At-06 Aug, 2024 | 02:27
Rejected At-
▼CVE Numbering Authority (CNA)

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://ipsilon-project.org/release/2.1.0.html
x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638
x_refsource_CONFIRM
https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c
x_refsource_CONFIRM
https://ipsilon-project.org/advisory/CVE-2016-8638.txt
x_refsource_CONFIRM
http://www.securityfocus.com/bid/94439
vdb-entry
x_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2809.html
vendor-advisory
x_refsource_REDHAT
Hyperlink: https://ipsilon-project.org/release/2.1.0.html
Resource:
x_refsource_CONFIRM
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638
Resource:
x_refsource_CONFIRM
Hyperlink: https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c
Resource:
x_refsource_CONFIRM
Hyperlink: https://ipsilon-project.org/advisory/CVE-2016-8638.txt
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.securityfocus.com/bid/94439
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2809.html
Resource:
vendor-advisory
x_refsource_REDHAT
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://ipsilon-project.org/release/2.1.0.html
x_refsource_CONFIRM
x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638
x_refsource_CONFIRM
x_transferred
https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c
x_refsource_CONFIRM
x_transferred
https://ipsilon-project.org/advisory/CVE-2016-8638.txt
x_refsource_CONFIRM
x_transferred
http://www.securityfocus.com/bid/94439
vdb-entry
x_refsource_BID
x_transferred
http://rhn.redhat.com/errata/RHSA-2016-2809.html
vendor-advisory
x_refsource_REDHAT
x_transferred
Hyperlink: https://ipsilon-project.org/release/2.1.0.html
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://ipsilon-project.org/advisory/CVE-2016-8638.txt
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.securityfocus.com/bid/94439
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-2809.html
Resource:
vendor-advisory
x_refsource_REDHAT
x_transferred
Details not found