CVE-2019-5440

Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality.
Source: NIST
CVE-2019-5440

Leave a Reply

Your email address will not be published.