Test ID:	1.3.6.1.4.1.25623.1.1.2.2018.1013
Category:	Huawei EulerOS Local Security Checks
Title:	Huawei EulerOS: Security Advisory for ipsilon (EulerOS-SA-2018-1013)
Summary:	The remote host is missing an update for the Huawei EulerOS 'ipsilon' package(s) announced via the EulerOS-SA-2018-1013 advisory.
Description:	Summary: The remote host is missing an update for the Huawei EulerOS 'ipsilon' package(s) announced via the EulerOS-SA-2018-1013 advisory. Vulnerability Insight: A vulnerability was found in ipsilon in the SAML2 provider's handling of sessions. An attacker able to hit the logout URL could determine what service providers other users are logged in to and terminate their sessions.(CVE-2016-8638) Affected Software/OS: 'ipsilon' package(s) on Huawei EulerOS V2.0SP2. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-8638 94439 http://www.securityfocus.com/bid/94439 RHSA-2016:2809 http://rhn.redhat.com/errata/RHSA-2016-2809.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8638 https://ipsilon-project.org/advisory/CVE-2016-8638.txt https://ipsilon-project.org/release/2.1.0.html https://pagure.io/ipsilon/c/511fa8b7001c2f9a42301aa1d4b85aaf170a461c
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.