N/A

Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session upon a successful authentication. Under some circumstances, that could have been an opportunity for an attacker to steal an authenticated session.

N/A

会话固定

Revive Adserver 安全漏洞

Revive Adserver是Revive Adserver团队的一套开源的广告管理系统。该系统提供广告投放、广告位管理、数据统计等功能。 Revive Adserver 3.2.3之前的版本中存在安全漏洞。攻击者可利用该漏洞窃取已授权的会话。

N/A

N/A