CVE-2016-9124

CVE-2016-9124 describes an Improper Restriction of Excessive Authentication Attempts vulnerability in Revive Adserver versions prior to 3.2.3, allowing for password-guessing attacks on the login page. This critical vulnerability (CVSS 9.8) has a network attack vector, low attack complexity, and can lead to full compromise of confidentiality, integrity, and availability. While an account lockdown was rejected, a random delay and parallel brute-forcing discouragement were implemented as countermeasures. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.