Security Advisory
CVE-2015-2684
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Shibboleth Service Provider (SP) before 2.5.4 allows remote authenticated users to cause a denial of service (crash) via a crafted SAML message.