CVE-2015-7368: Infoleak
Published Oct 14, 2015
·Updated
Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache.
Affected Software
1 affected component
revive-adserver Revive Adserver<=3.2.1
Remediation
Event History
Oct 14, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7368?
CVE-2015-7368 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2015-7368?
To fix CVE-2015-7368, update to Revive Adserver version 3.2.2 or later.
3
What impact does CVE-2015-7368 have on my system?
CVE-2015-7368 allows local users to access sensitive information from the web browser cache affecting the confidentiality of the data.
4
Which versions of Revive Adserver are affected by CVE-2015-7368?
CVE-2015-7368 affects all versions of Revive Adserver prior to 3.2.2.
5
Is CVE-2015-7368 exploitable remotely?
CVE-2015-7368 is not remotely exploitable as it requires local user access to exploit the vulnerability.