CVE-2023-26756

Name of the Vulnerable Software and Affected Versions Revive Adserver version 5.4.1

Description The login page of Revive Adserver is vulnerable to brute force attacks. The vendor's position is that this is effectively mitigated by rate limits and password-quality features.

Recommendations For Revive Adserver version 5.4.1, consider implementing additional security measures to mitigate the risk of brute force attacks, such as further restricting login attempts or enhancing password requirements, as the vendor's existing mitigations may not be sufficient for all users.