CVE-2019-5433CWE-601

CVE-2019-5433: fallo en Revive Adserver

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Revive Adserver

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 1.7%
A user having access to the UI of a Revive Adserver instance could be tricked into clicking on a specifically crafted admin account-switch.php URL that would eventually lead them to another (unsafe) domain, potentially used for stealing credentials or other phishing attacks. This vulnerability was addressed in version 4.2.0.
Productos afectados
n/a · Revive Adserver