Description
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.
Unscored
CVE-2017-5831
EUVD-2017-14908GHSA-7j56-6xxh-fcp2
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote…
Published Mar 3, 2017 · Updated Aug 5, 2024 · Assigned by mitre