CVE-2015-7367

Summary

Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.revive-adserver.com/security/revive-sa-2015-001
• http://www.securityfocus.com/archive/1/536633/100/0/threaded
• http://seclists.org/fulldisclosure/2015/Oct/32
• http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html

References

• http://www.revive-adserver.com/security/revive-sa-2015-001
• http://www.securityfocus.com/archive/1/536633/100/0/threaded
• http://seclists.org/fulldisclosure/2015/Oct/32
• http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html

• ←Previous
• Next→