Vulnerabilities > CVE-2023-26756 - Improper Restriction of Excessive Authentication Attempts vulnerability in Revive Adserver 5.4.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
revive
CWE-307

Summary

The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this is effectively mitigated by rate limits and password-quality features.

Vulnerable Configurations

Part Description Count
Application
Revive
1