CVE-2015-7367 in Adserver

Résumé

par MITRE

Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 25/09/2015
• Divulgation: 14/10/2015
• Modérer: accepté
• Entrée: VDB-78464
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.02544
• KEV: non
• Activités: très faible
• Secteur: Transportation, Telecommunication

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7367
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7367
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7367/