Threats tagged 'ghsa-8xf9-935r-5f85'

Revive Adserver versions 5.5.2, 6.0.1, and earlier contain insecure design policies in their user management system that allow non-admin users to access contact names and email addresses of other users. This information disclosure vulnerability does not affect system integrity or availability but exposes user contact details.