Non notée
CVE-2016-9129 Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy
Description
Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Revive Adserver instance by examining the message printed by the password recovery system. Such information cannot however be used directly to log in to the system, which requires a username.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Revive Adserver All versions before 3.2.3 | Versions non publiées |
Références
- hackerone.com hackerone.com
- github.com github.com
- www.revive-adserver.com www.revive-adserver.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Revive Adserver All versions before 3.2.3
Les 11 CVE de Revive Adserver All versions before 3.2.3 →
CVE-2016-9455
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF)
Non notée
CVE-2016-9457
Revive Adserver before 3.2.3 suffers from Reflected XSS
Non notée
CVE-2016-9454
Revive Adserver before 3.2.3 suffers from Persistent XSS
Non notée
CVE-2016-9128
Revive Adserver before 3.2.3 suffers from reflected XSS
Non notée