CVE-2019-5440

Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function generateRecoveryId generates a...

CVE-2019-5440: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function generateRecoveryId generates a...

PT-2019-17670

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 4.2.1 Description The issue is related to the use of a cryptographically weak PRNG in the password recovery token generation. This could potentially lead to an authentication bypass attack if the password...