NVD

Id
83991  
Name
CVE-2016-9125  
Description
Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, by not invalidating the existing session upon a successful authentication. Under some circumstances, that could have been an opportunity for an attacker to steal an authenticated session.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-29  
Published
2017-03-27  
Modified Date
2017-03-29  
Seq
2016-9125  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412120 83991 CVE-2017-6305 96423  View
413428 83991 CVE-2017-0881 https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f  View
413429 83991 CVE-2017-0881 https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ  View
413430 83991 CVE-2017-0881 https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f  View
413431 83991 CVE-2017-0881 https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ  View
413432 83991 CVE-2017-0881 https://github.com/zulip/zulip/commit/7ecda1ac8e26d8fb3725e954b2dc4723dda2255f  View
413433 83991 CVE-2017-0881 https://groups.google.com/d/msg/zulip-announce/VyawgRuoY34/NTBwnTArGwAJ  View

Related JVN