PT-2019-17666 · Revive Adserver · Revive Adserver

Published 2019-05-06 · Updated 2019-12-16 · CVE-2019-5434

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 4.2.0

Description The issue allows an attacker to send a specifically crafted payload to the XML-RPC invocation script, triggering the unserialize() call on the what parameter in the openads.spc RPC method. This could be used to perform various types of attacks, such as exploiting serialize-related PHP vulnerabilities or PHP object injection. There is an unconfirmed possibility that the vulnerability has been used by attackers to gain access to Revive Adserver instances and deliver malware to third-party websites.

Recommendations For versions prior to 4.2.0, update to version 4.2.0 to address the issue. As a temporary workaround, consider restricting access to the openads.spc RPC method until the update is applied. Avoid using the what parameter in the affected XML-RPC invocation script until the issue is resolved.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2019-5434

Affected Products

Revive Adserver

References · 8

• 🔥 https://exploit-db.com/exploits/47739 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5434 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5434 · Vendor Advisory
• https://revive-adserver.com/security/revive-sa-2019-001 · Vendor Advisory
• https://t.me/defcon_news/33035 · Telegram Post
• https://hackerone.com/reports/512076 · Note
• https://hackerone.com/reports/542670 · Note
• http://packetstormsecurity.com/files/155559/Revive-Adserver-4.2-Remote-Code-Execution.html · Note