Test ID:	1.3.6.1.4.1.25623.1.0.106559
Category:	Web application abuses
Title:	Revive Adserver Multiple Vulnerabilities
Summary:	Revive Adserver is prone to multiple vulnerabilities.
Description:	Summary: Revive Adserver is prone to multiple vulnerabilities. Vulnerability Insight: Revive Adserver is prone to multiple vulnerabilities: - Revive Adserver does unserializing untrusted data submitted via cookies in the delivery scripts. An attacker could use such vector to either perform generic RCE attacks (e.g. when a vulnerable PHP version is being used) or, potentially, application-specific attacks. - Revive Adserver isn't properly invalidating the current session when setting a new password via the forgot password mechanism. This could allow attackers having access to the session ID to keep the authenticated session alive. - Revive Adserver is vulnerable to a persistent XSS attack: an authenticated user could set their own email address to a specifically crafted string which is then displayed without proper escaping in the context of other users (e.g. the administrator user), giving them an opportunity to steal a session with elevated privileges. - Revive Adserver is vulnerable to a reflected XSS attack: several of the parameters used in the invocation code generation for interstitial zones aren't properly escaped when displayed. Vulnerability Impact: A remote attacker may gain complete control. Affected Software/OS: Revive Adserver version 4.0.0 and prior. Solution: Upgrade to version 4.0.1 or later CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5830 BugTraq ID: 95875 http://www.securityfocus.com/bid/95875 http://www.openwall.com/lists/oss-security/2017/02/02/3 Common Vulnerability Exposure (CVE) ID: CVE-2017-5831 Common Vulnerability Exposure (CVE) ID: CVE-2017-5832 Common Vulnerability Exposure (CVE) ID: CVE-2017-5833
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.