Lucene search
PRIOn knowledge basePRION:CVE-2016-9125HistoryMar 28, 2017 - 2:59 a.m.
Session fixation
2017-03-2802:59:00
PRIOn knowledge base
www.prio-n.com
3
Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session upon a successful authentication. Under some circumstances, that could have been an opportunity for an attacker to steal an authenticated session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| revive_adserver | le | 3.2.2 |
Related
cve
cve
CVE-2016-9125
2017-03-28 02:59:00
osv
osv
CVE-2016-9125
2017-03-28 02:59:00
cvelist
cvelist
CVE-2016-9125
2017-03-28 02:46:00
nvd
nvd
CVE-2016-9125
2017-03-28 02:59:00
openvas
openvas
Revive Adserver Multiple Vulnerabilities
2016-10-04 00:00:00