Description

Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked.

Remediation

References

CVE-2015-7367

Related Vulnerabilities

WordPress Ultimate Member Plugin CVE-2020-36157 Vulnerability (CVE-2020-36157)

Oracle Database Server CVE-2014-6454 Vulnerability (CVE-2014-6454)

Craft CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-3814)

MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-5131)

MySQL CVE-2017-10296 Vulnerability (CVE-2017-10296)

Severity

High

Classification

CVE-2015-7367 CWE-284

Tags

Missing Update Known Vulnerabilities