CVE

Id
95949  
CVE No.
CVE-2016-9129  
Status
Candidate  
Description
Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is possible to check whether or not an email address was associated to one or more user accounts on a target Revive Adserver instance by examining the message printed by the password recovery system. Such information cannot however be used directly to log in to the system, which requires a username.  
Phase
Assigned (20161031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799643 95949 CVE-2016-9129 MISC:https://github.com/revive-adserver/revive-adserver/commit/38223a841190bebd7a137c7bed84fbbcb2b0c2a5  View
799644 95949 CVE-2016-9129 MISC:https://hackerone.com/reports/98612  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5410 JVNDB-2016-006183 Tatsuya Kinoshita w3m フォークにおけるサービス運用妨害 (DoS) の脆弱性 Tatsuya Kinoshita w3m フォークには、サービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-9442 95949 4.3 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006183.html  View