CVE-2025-52669 in Adserver

Tóm tắt

Bởi MITRE • 20/11/2025

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• chịu trách nhiệm: Hackerone
• Đặt trước: 18/06/2025
• Tiết lộ: 20/11/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-333106
• CPE: sẵn sàng
• CWE: CWE-200 (Đã xác nhận)
• CVSS: 4.3 (CNA)
• EPSS: 0.00284
• KEV: không
• Các hoạt động: rất thấp
• ngành: Transportation, Telecommunication

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-52669
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-52669
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-52669/