Not rated
CVE-2016-9129 Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy
Description
Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Revive Adserver instance by examining the message printed by the password recovery system. Such information cannot however be used directly to log in to the system, which requires a username.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Revive Adserver All versions before 3.2.3 | Versions not published |
References
- hackerone.com hackerone.com
- github.com github.com
- www.revive-adserver.com www.revive-adserver.com
Timeline
- Published
- Last modified
Other CVEs of Revive Adserver All versions before 3.2.3
The 11 CVEs of Revive Adserver All versions before 3.2.3 →
CVE-2016-9455
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)
Not rated
CVE-2016-9457
Revive Adserver before 3.2.3 suffers from Reflected XSS
Not rated
CVE-2016-9454
Revive Adserver before 3.2.3 suffers from Persistent XSS
Not rated
CVE-2016-9128
Revive Adserver before 3.2.3 suffers from reflected XSS
Not rated