projects / cascardo / ipsilon.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (from: 826e633)
Fix permission check on SP update
authorPatrick Uiterwijk <puiterwijk@redhat.com>
Tue, 18 Aug 2015 14:26:50 +0000 (16:26 +0200)
committerPatrick Uiterwijk <puiterwijk@redhat.com>
Fri, 21 Aug 2015 13:45:00 +0000 (15:45 +0200)
The permission check for owner was checking the wrong field,
which would make it possible for anyone to update the Service
Provider owner, making it possible for anyone to change the
SP owner, allowing anyone to change the SP name.

Fixes: CVE-2015-5217

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Reviewed-by: Rob Crittenden <rcritten@redhat.com>

No differences found
Unnamed repository; edit this file 'description' to name the repository.