PT-2015-7530 · Revive Adserver Team · Revive Adserver

N B Sri Harsha · Publicado 2015-10-14 · Atualizado 2018-10-09 · CVE-2015-7367

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.2

Description The issue allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been deleted or unlinked.

Recommendations For versions prior to 3.2.2, update to version 3.2.2 or later to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2015-7367

Produtos afetados

Revive Adserver

Referências · 5

• http://revive-adserver.com/security/revive-sa-2015-001 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7367 · Nota de Segurança
• http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html · Nota
• http://seclists.org/fulldisclosure/2015/Oct/32 · Nota
• http://securityfocus.com/archive/1/536633/100/0/threaded · Nota