A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-955:01 advisory.

    Ipsilon is a multi-protocol Identity Provider service. Its function is to     bridge authentication providers and applications to achieve Single Sign On     and Federation.
    Security issues fixed with this release:
    CVE-2016-8638
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was
    found that allows attacker to log out active sessions of other users. This issue is related to how it
    tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other
    users. It is also called a "SAML2 multi-session vulnerability." (CVE-2016-8638)

According to the version of the ipsilon packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A vulnerability was found in ipsilon in the SAML2     provider's handling of sessions. An attacker able to     hit the logout URL could determine what service     providers other users are logged in to and terminate     their sessions.(CVE-2016-8638)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New Ipsilon 2.0 release.

----

Main changes since 1.2 :

Security fix for &#x200B;CVE-2016-8638 OpenID Connect 2.0 OAuth 2 User portal with consent management Authorization plugin support Support for adding an instance to the web root Lots of bugfixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for ipsilon is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The ipsilon packages provide the Ipsilon identity provider service for federated single sign-on (SSO). Ipsilon links authentication providers and applications or utilities to allow for SSO. It includes a server and utilities to configure Apache-based service providers.

Security Fix(es) :

* A vulnerability was found in ipsilon in the SAML2 provider's handling of sessions. An attacker able to hit the logout URL could determine what service providers other users are logged in to and terminate their sessions. (CVE-2016-8638)

This issue was discovered by Patrick Uiterwijk (Red Hat) and Howard Johnson.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2809 advisory.

    The ipsilon packages provide the Ipsilon identity provider service for federated single sign-on (SSO).
    Ipsilon links authentication providers and applications or utilities to allow for SSO. It includes a     server and utilities to configure Apache-based service providers.

    Security Fix(es):

    * A vulnerability was found in ipsilon in the SAML2 provider's handling of sessions. An attacker able to     hit the logout URL could determine what service providers other users are logged in to and terminate their     sessions. (CVE-2016-8638)

    This issue was discovered by Patrick Uiterwijk (Red Hat) and Howard Johnson.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2809 advisory.

    [1.0.0-13]
    - Backport patch for CVE-2016-8638 RHBZ#1394116

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
289223	MiracleLinux 7 : ipsilon-1.0.0-13.el7 (AXSA:2016-955:01)	Nessus	Miracle Linux Local Security Checks	critical
409364	SCA: security update for ipsilon (GHSA-376m-3rm2-9jm6)	Tenable Cloud Security	SCA Checks	critical
409364	SCA: security update for ipsilon (GHSA-376m-3rm2-9jm6)	Tenable Self-Hosted Container Security	SCA Checks	critical
106154	EulerOS 2.0 SP2 : ipsilon (EulerOS-SA-2018-1013)	Nessus	Huawei Local Security Checks	critical
96170	Fedora 24 : ipsilon (2016-b465090499)	Nessus	Fedora Local Security Checks	critical
96167	Fedora 25 : ipsilon (2016-2d8fb6d7ad)	Nessus	Fedora Local Security Checks	critical
95355	CentOS 7 : ipsilon (CESA-2016:2809)	Nessus	CentOS Local Security Checks	critical
95047	RHEL 7 : ipsilon (RHSA-2016:2809)	Nessus	Red Hat Local Security Checks	critical
95041	Oracle Linux 7 : ipsilon (ELSA-2016-2809)	Nessus	Oracle Linux Local Security Checks	critical

Detections

Analytics

CVE-2016-8638

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical