Description
Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system.
Remediation
References
Related Vulnerabilities
WordPress Plugin cdnvote 'cdnvote-post.php' Multiple SQL Injection Vulnerabilities (0.4.1)
PHP-Fusion CVE-2020-35952 Vulnerability (CVE-2020-35952)
Drupal Core 8.x Security Bypass (8.0.0 - 8.5.5)
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17305)
WordPress Plugin mTouch Quiz Multiple Vulnerabilities (3.0.6)