Description

The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors.

Remediation

References

CVE-2015-7369

Related Vulnerabilities

WordPress Plugin WP RSS Multi Importer Multiple Vulnerabilities (3.15)

WordPress Credentials Management Errors Vulnerability (CVE-2016-5838)

Drupal Other Vulnerability (CVE-2006-1225)

WordPress Plugin Stop User Enumeration Security Bypass (1.3.18)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.11)

Severity

High

Classification

CVE-2015-7369 CWE-284

Tags

Missing Update Known Vulnerabilities