// For flags

CVE-2016-9471

 

Severity Score

3.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the fact that such characters are normally ignored when an HTML page is displayed in a browser. The issue could have therefore been exploited for user spoofing, although elevated privileges are required to create users within Revive Adserver.

Revive Adserver en versiones anteriores a 3.2.5 y 4.0.0 sufre de inyección de elemento especial. Los nombres de usuario no se desinfectaron correctamente al crear usuarios en una instancia de Revive Adserver. Especialmente, los caracteres de control no fueron filtrados, permitiendo que los nombres de usuario aparentemente idénticos coexistan en el sistema, debido al hecho de que tales caracteres normalmente se ignoran cuando una página HTML se muestra en un navegador. El problema podría por lo tanto haber sido explotado para la falsificación de usuarios, aunque se requieren privilegios elevados para crear usuarios dentro de Revive Adserver.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Attack Vector
Network
Attack Complexity
High
Authentication
Single
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-11-19 CVE Reserved
  • 2017-03-28 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Revive-adserver
Search vendor "Revive-adserver"
 Revive Adserver
Search vendor "Revive-adserver" for product "Revive Adserver"
 <= 3.2.4
Search vendor "Revive-adserver" for product "Revive Adserver" and version " <= 3.2.4"
-
Affected
Revive-adserver
Search vendor "Revive-adserver"
 Revive Adserver
Search vendor "Revive-adserver" for product "Revive Adserver"
 4.0.0
Search vendor "Revive-adserver" for product "Revive Adserver" and version "4.0.0"
-
Affected