A critical authorization bypass vulnerability in Revive Adserver permits authenticated attackers to perform account takeovers by manipulating user credentials.

The vulnerability is an authorization bypass flaw that allows any logged in attacker to change the email addresses of other users, subsequently leveraging the password reset mechanism to gain unauthorized access to those accounts.

The ability for a standard authenticated user to escalate privileges and hijack other accounts represents a severe threat to data integrity and system security. With a CVSS score of 8.8, the vulnerability poses a high risk of unauthorized access to sensitive administrative or user functions, potentially leading to total system compromise.

Immediate Action: Upgrade to Revive Adserver version 5.5.3 or 6.0.2 immediately to apply the vendor-supplied security fixes.

Proactive Monitoring: Review web server and application access logs for unusual patterns of account profile updates or frequent use of the password reset functionality by non-administrative accounts.

Compensating Controls: Implement strict network access controls and ensure that the Adserver instance is not exposed to untrusted users who could register accounts to exploit this flaw.

Public Exploit Available: Unknown.

Given the high CVSS severity and the nature of the flaw, administrators should prioritize patching Revive Adserver to the latest versions. The potential for account takeover makes this an urgent security update, as it directly undermines the authentication and authorization model of the application.