Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-52669

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Revive Revive Adserver

  • 6 to ≤ 6.0.1affected
  • 5 to ≤ 5.5.2affected
  • 6.0.2 to ≤ 6.0.2unaffected
  • 5.5.3 to ≤ 5.5.3unaffected

References