Lucene search
K

CVE-2021-22948

🗓️ 09 Jan 2026 11:20:42Reported by redhat.comType 
redhatcve
 redhatcve
🔗 access.redhat.com👁 1 Views

Vulnerability in revive adserver session identifier generation before 5.3.0 uses insecure uniqid, enabling brute force account takeover.

Related
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-22948
23 Sep 202116:30
circl
CNNVD
revive-adserver 安全特征问题漏洞
23 Sep 202100:00
cnnvd
CVE
CVE-2021-22948
23 Sep 202112:44
cve
Cvelist
CVE-2021-22948
23 Sep 202112:44
cvelist
EUVD
EUVD-2021-10076
7 Oct 202500:30
euvd
Hacker One
Revive Adserver: Reflected XSS on /admin/stats.php
7 May 202114:35
hackerone
Hacker One
Revive Adserver: Use of a Broken or Risky Cryptographic Algorithm
16 Aug 202115:14
hackerone
NVD
CVE-2021-22948
23 Sep 202113:15
nvd
Prion
Design/Logic Flaw
23 Sep 202113:15
prion
Positive Technologies
PT-2021-15291 · Unknown · Revive Adserver
23 Sep 202100:00
ptsecurity
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Mar 2026 14:47Current
6.8Medium risk
Vulners AI Score6.8
CVSS 24.3
CVSS 3.17.1
EPSS0.00372
1