PT-2018-17108 · Reprise · Reprise License Manager

Pedro Sousa Rodrigues + 1 · Publicado 2018-02-21 · Atualizado 2025-04-30 · CVE-2018-5716

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 11.0

Description: A Path Traversal issue allows an attacker to access files on the server's file system by modifying a field in the web request. Specifically, by specifying a pathname in the lf parameter to the "goform/edit lf get data" URI, an attacker can retrieve the content of a file.

Recommendations: For Reprise License Manager version 11.0, consider restricting access to the "goform/edit lf get data" URI to minimize the risk of exploitation. Avoid using the lf parameter in this URI until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-5716

Produtos afetados

Reprise License Manager

Referências · 4

• 🔥 http://0x90.zone/web/path-traversal/2018/02/16/Path-Traversal-Reprise-LM.html · Exploit
• https://t.me/cvenotify/120401 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-5716 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5716 · Nota de Segurança