cbcvebase.
CVE-2022-28365
published 2022-04-09

CVE-2022-28365: Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The…

PriorityP278medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
8.36%
94.3th percentile
Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture, and file/directory details.

Affected

1 ranges
VendorProductVersion rangeFixed in
reprisesoftwarereprise_license_manager>= 14.2 < 15.115.1

Detection & IOCsextracted from sources · hover to see the quote

url/goforms/rlminfo↗
path/goforms/rlminfo↗
  • →Send an unauthenticated HTTP GET request to /goforms/rlminfo; a vulnerable Reprise License Manager 14.2 instance will return a 200 response whose body contains both the strings 'RLM Version' and 'Platform type'. ↗
  • →Shodan dork to identify exposed Reprise License Manager instances: http.html:"reprise license" or http.html:"reprise license manager". ↗
  • →FOFA dork to identify exposed Reprise License Manager instances: body="reprise license manager" or body="reprise license". ↗
  • →Google dork to identify exposed Reprise License Manager web interfaces: inurl:"/goforms/menu". ↗
  • ·The vulnerability is specific to Reprise License Manager version 14.2; other versions may or may not be affected. ↗
  • ·No authentication is required to exploit this endpoint, making it trivially accessible to any network-reachable attacker. ↗

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vulncheck5.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.