CVE-2015-2684

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message

published March 31, 2015

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01936 · 79.9th percentile
Published
2015-03-31T14:00Z
EPSS history
Timeline
  • 31 MAR 14:00Z
    Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message
    cvelistv5