Insecure User Management in Revive Adserver by Revive Adserver

CVE-2025-52669

What is CVE-2025-52669?

An insecure user management design in Revive Adserver versions 5.5.2, 6.0.1, and earlier allows non-administrator users to access sensitive information, including contact names and email addresses of other users within the system. This vulnerability poses a threat to user privacy and highlights the importance of implementing robust access controls. Organizations using affected versions are encouraged to review their user management policies and apply necessary mitigations promptly.

References