Description

Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.

Remediation

References

CVE-2015-7368

Related Vulnerabilities

Envoy Proxy Uncontrolled Recursion Vulnerability (CVE-2022-23606)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5863)

WordPress Plugin Spam Free WordPress Security Bypass (1.9.2)

Drupal Core 8.9.x Multiple Security Bypass Vulnerabilities (8.9.0 - 8.9.18)

WordPress Plugin EnvialoSimple:Email Marketing y Newsletters Multiple Cross-Site Scripting Vulnerabilities (1.97)

Severity

Low

Classification

CVE-2015-7368 CWE-200

Tags

Missing Update Known Vulnerabilities