Skip to content
OpenAdvisories
Critical RHSA-2016:2809 1 CVE

Red Hat Security Advisory: ipsilon security update

Published Sep 15, 2024 · Updated May 13, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-authform 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-authgssapi 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-authldap 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-base 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-client 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-filesystem 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-infosssd 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-persona 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-saml2 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-saml2-base 0:1.0.0-13.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server ipsilon-tools-ipa 0:1.0.0-13.el7_3

Vulnerabilities 1

  • Critical 9.1
    CVE-2016-8638

    Session Fixation in ipsilon

    A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated atta…

    ipsilon PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392829
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2809.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-8638
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-8638
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-8638