7.5

CVE-2015-7367

Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Revive-adserver ≫ Revive Adserver Version <= 3.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.54% 0.83
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://packetstormsecurity.com/files/133893/Revive-Adserver-3.2.1-CSRF-XSS-Local-File-Inclusion.html
http://seclists.org/fulldisclosure/2015/Oct/32
http://www.revive-adserver.com/security/revive-sa-2015-001
Vendor Advisory
http://www.securityfocus.com/archive/1/536633/100/0/threaded