vulnwire
5.3med

CVE-2016-9129

Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy.

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.4%
percentile 73%
Public exploits
0
none known

Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Revive Adserver instance by examining the message printed by the password recovery system. Such information cannot however be used directly to log in to the system, which requires a username.

Exploit prediction (EPSS)

1.43% probability of exploitation in the next 30 days, higher than 73% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a Revive Adserver All versions before 3.2.3

Classification

Weakness
  • CWE-203 Observable Discrepancy
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • hackerone.com /reports/98612 · x_refsource_MISC, x_transferred
  • github.com /revive-adserver/revive-adserver/commit/38223a841190bebd7a137c7bed84fbbcb2b0c2a5 · x_refsource_MISC, x_transferred
  • revive-adserver.com /security/revive-sa-2016-001/ · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.