Description
A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login method returned a session ID cookie in the HTTP headers, and although the method correctly returned an error, the associated session was not invalidated. As a result, the leaked session ID could be used to perform subsequent API calls without restrictions.
Remediation
References
Related Vulnerabilities
WordPress Plugin Theme Blvd Widget Areas Multiple Security Bypass Vulnerabilities (1.2.2)
WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4196)
WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)