CVE-2015-5217

Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0

Description The issue is related to the Identity Provider (IdP) server, where the providers/saml2/admin.py file does not properly check permissions to update the SAML2 Service Provider (SP) owner. This allows remote authenticated users to cause a denial of service via a duplicate SP name.

Recommendations For Ipsilon versions 0.1.0 through 1.0.0, update to version 1.0.1 or later to resolve the issue.