PT-2020-19978 · Revive Adserver · Revive Adserver

Hoangn144 · Published 2020-04-03 · Updated 2020-04-07 · CVE-2020-8142

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.0.5

Description A security restriction bypass issue has been found, allowing an attacker with access to the admin user interface to change the email address or password of the currently logged-in user without knowing the current password. This is achieved by altering the form payload, specifically by turning the pwold parameter into an array, which allows the operation to be authorized even if no password is provided. The attack requires physical access to the user interface of a logged-in user.

Recommendations For Revive Adserver versions prior to 5.0.5, update to version 5.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin user interface to minimize the risk of exploitation. Avoid using the pwold parameter in the affected form until the issue is resolved.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-8142

Affected Products

Revive Adserver

References · 4

• 🔥 https://hackerone.com/reports/792895 · Exploit
• https://osv.dev/vulnerability/CVE-2020-8142 · Vendor Advisory
• https://revive-adserver.com/security/revive-sa-2020-002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8142 · Security Note