CVE-2017-5831: Revive-Adserver Revive Adserver

Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days.

Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.

Affected products

• Revive-Adserver Revive Adserver: up to and including 4.0.0

Published 2017-03-03. Last modified 2026-06-17.