CVE-2019-5440

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-5440
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5440.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-5440
Published
2019-05-28T19:29:06.190Z
Modified
2026-04-10T04:19:28.475448Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Use of cryptographically weak PRNG in the password recovery token generation of Revive Adserver < v4.2.1 causes a potential authentication bypass attack if an attacker exploits the password recovery functionality. In lib/OA/Dal/PasswordRecovery.php, the function generateRecoveryId() generates a password reset token that relies on the PHP uniqid function and consequently depends only on the current server time, which is often visible in an HTTP Date header.

References

Affected packages

Git / github.com/revive-adserver/revive-adserver

Affected ranges

Type
GIT
Repo
https://github.com/revive-adserver/revive-adserver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0c98116a29bcb19dccbc8ec49d3cbb9cafd7a17b
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.2.1"
        }
    ]
}

Affected versions

v3.*
v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.1.0
v3.1.0-beta
v3.2.0
v3.2.0-beta
v3.2.1
v3.2.1-rc1
v4.*
v4.0.0
v4.0.0-rc1
v4.0.1
v4.0.2
v4.1.0
v4.1.0-rc1
v4.1.2
v4.1.3
v4.1.4
v4.2.0
v4.2.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5440.json"