NetSight
IP …
medium4.0

CVE-2015-2684

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

Impact

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

Affected products

VendorProductAffected versions
ShibbolethService Provider
through 2.5.3
DebianDebian Linux
Version 7.0

Weakness classification

CWE-20

References