Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ReviveAdserver Session Fixation Vulnerability - CVE-2016-9125 - Vulnerability Database
ReviveAdserver

ReviveAdserver Session Fixation Vulnerability - CVE-2016-9125

Critical
Reference: CVE-2016-9125
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-9125
Title: ReviveAdserver Session Fixation Vulnerability
Overview:

Revive Adserver before 3.2.3 suffers from session fixation by allowing arbitrary session identifiers to be forced and at the same time by not invalidating the existing session upon a successful authentication. Under some circumstances that could have been an opportunity for an attacker to steal an authenticated session.