Revive Adserver up to 3.2.4/4.0.0 Username Control Character unknown vulnerability

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Revive Adserver up to 3.2.4/4.0.0 (Advertising Software). Affected by this vulnerability is an unknown part of the component Username Handler. Upgrading to version 3.2.5 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
6545867	08/23/2020	VulD...	osvdb_title	CVE-2016-9471 - Revive Adserver - Spoofing Issue		08/23/2020	accepted	100
6545821	08/23/2020	VulD...	discoverydate	1475020800		08/23/2020	accepted	100
6545877	03/28/2017	VulD...	cvss3_nvd_basescore	3.1	nist.gov	03/28/2017	accepted	90
6545876	03/28/2017	VulD...	0day_days	180		03/28/2017	accepted	90
6545875	03/28/2017	VulD...	cvss3_vuldb_rc	X		03/28/2017	accepted	90
6545874	03/28/2017	VulD...	cvss3_vuldb_rl	O		03/28/2017	accepted	90
6545873	03/28/2017	VulD...	cvss3_vuldb_e	X		03/28/2017	accepted	90
6545872	03/28/2017	VulD...	cvss2_vuldb_rc	ND		03/28/2017	accepted	90
6545871	03/28/2017	VulD...	cvss2_vuldb_rl	OF		03/28/2017	accepted	90
6545870	03/28/2017	VulD...	cvss2_vuldb_e	ND		03/28/2017	accepted	90
6545869	03/28/2017	VulD...	location	Website		03/28/2017	accepted	90
6545868	03/28/2017	VulD...	seealso	98984 98982		03/28/2017	accepted	100
6545866	03/28/2017	VulD...	cve_nvd_summary	Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.	mitre.org	03/28/2017	accepted	100
6545865	03/28/2017	VulD...	cve_nvd_published	1490572800	mitre.org	03/28/2017	accepted	100
6545864	03/28/2017	VulD...	cve_assigned	1479513600	mitre.org	03/28/2017	accepted	100
6545863	03/28/2017	VulD...	cve	CVE-2016-9471	mitre.org	03/28/2017	accepted	100
6545862	03/28/2017	VulD...	upgrade_version	3.2.5		03/28/2017	accepted	100
6545861	03/28/2017	VulD...	name	Upgrade		03/28/2017	accepted	100
6545860	03/28/2017	VulD...	price_0day	$0-$5k	see documentation	03/28/2017	accepted	100
6545859	03/28/2017	VulD...	url	https://github.com/revive-adserver/revive-adserver/commit/05b1eceb	github.com	03/28/2017	accepted	100