CVE-2020-8142

A security restriction bypass vulnerability has been discovered in Revive Adserver version 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requires the logged in user to type the current password in order to change the e-mail address or the password. It was howev...

CVE-2020-8142: Incorrect Authorization

A security restriction bypass vulnerability has been discovered in Revive Adserver version 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requires the logged in user to type the current password in order to change the e-mail address or the password. It was howev...

PT-2020-19978

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 5.0.5 Description A security restriction bypass issue has been found, allowing an attacker with access to the admin user interface to change the email address or password of the currently logged-in user withou...