Description

The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.

Remediation

References

CVE-2015-7369

Related Vulnerabilities

WordPress Plugin SS Quiz Cross-Site Request Forgery and Access Security Bypass Vulnerabilities (1.11)

WordPress Plugin demon image annotation Cross-Site Request Forgery (4.7)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.16)

WordPress Plugin Dynamic Widgets 'id' Parameter Cross-Site Scripting (1.5.1)

WordPress Plugin Image Slider by Ays-Responsive Slider and Carousel SQL Injection (2.4.9)

Severity

High

Classification

CVE-2015-7369 CWE-284

Tags

Missing Update Known Vulnerabilities