Medium severity5.9NVD Advisory· Published Mar 3, 2017· Updated May 13, 2026
CVE-2017-5831
CVE-2017-5831
Description
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.
Affected products
1- cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*Range: <=4.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.revive-adserver.com/security/revive-sa-2017-001/nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2017/02/02/3nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/95875nvd
News mentions
0No linked articles in our index yet.