NVD

Id
83242  
Name
CVE-2017-5831  
Description
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2017-03-18  
Published
2017-03-03  
Modified Date
2017-03-06  
Seq
2017-5831  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408061 83242 CVE-2016-7429 https://bto.bluecoat.com/security-advisory/sa139  View
409109 83242 CVE-2016-4660 93849  View
409110 83242 CVE-2016-4660 https://support.apple.com/HT207269  View
409111 83242 CVE-2016-4660 https://support.apple.com/HT207270  View
409112 83242 CVE-2016-4660 https://support.apple.com/HT207271  View
409113 83242 CVE-2016-4660 https://support.apple.com/HT207275  View
409114 83242 CVE-2016-4660 93849  View
409115 83242 CVE-2016-4660 https://support.apple.com/HT207269  View
409116 83242 CVE-2016-4660 https://support.apple.com/HT207270  View
409117 83242 CVE-2016-4660 https://support.apple.com/HT207271  View
409118 83242 CVE-2016-4660 https://support.apple.com/HT207275  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65570 JVNDB-2017-001933 Revive Adserver の forgot password メカニズムにおける Web セッションをハイジャックされる脆弱性 Revive Adserver の forgot password メカニズムには、新しいパスワードを設定する場合、Web セッションをハイジャックされる脆弱性が存在します。 CVE-2017-5831 CVE-2017-5831 83242 5.5 5.9 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001933.html 2017-01-26 2017-03-23 View