The Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug.
References
Link | Resource |
---|---|
http://media.pixalate.com/white-papers/xindi.pdf | Exploit Mitigation Third Party Advisory |
Configurations
Information
Published : 2018-10-30 10:29
Updated : 2019-01-29 06:15
NVD link : CVE-2015-7266
Mitre link : CVE-2015-7266
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
iab
- open_real-time_bidding