CVE-2018-15573
published 2018-08-20CVE-2018-15573: An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as…
PriorityP352high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
2.15%
79.8th percentile
An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter. By default, the web interface is on port 5054, and does not require authentication. NOTE: the vendor has stated "We do not consider this a vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| reprisesoftware | reprise_license_manager | < 16.1 | 16.1 |
| reprisesoftware | reprise_license_manager | >= 14.2 < 17.0 | 17.0 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-93xq-g83c-52rf: ** DISPUTED ** An issue was discovered in Reprise License Manager (RLM) through 12
ghsa_unreviewed·2022-05-13
CVE-2018-15573 [HIGH] CWE-434 GHSA-93xq-g83c-52rf: ** DISPUTED ** An issue was discovered in Reprise License Manager (RLM) through 12
** DISPUTED ** An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter. By default, the web interface is on port 5054, and does not require authentication. NOTE: the vendor has stated "We do not consider this a vulnerability."
GHSA
GHSA-96xv-6m77-v224: An issue was discovered in Reprise RLM 14
ghsa_unreviewed·2021-12-14·CVSS 8.8
CVE-2021-44153 [HIGH] GHSA-96xv-6m77-v224: An issue was discovered in Reprise RLM 14
An issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables, as demonstrated by an ISV demo "C:\Windows\System32\calc.exe" entry. An attacker can exploit this to run a malicious binary on startup, or when triggering the Reread/Restart Servers function on the webserver. (Exploitation does not require CVE-2018-15573, because the license file is meant to be changed in the application.)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-08-20
Published