PT-2018-17108 · Reprise · Reprise License Manager

Pedro Sousa Rodrigues + 1 · Published 2018-02-21 · Updated 2025-04-30 · CVE-2018-5716

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 11.0

Description: A Path Traversal issue allows an attacker to access files on the server's file system by modifying a field in the web request. Specifically, by specifying a pathname in the lf parameter to the "goform/edit lf get data" URI, an attacker can retrieve the content of a file.

Recommendations: For Reprise License Manager version 11.0, consider restricting access to the "goform/edit lf get data" URI to minimize the risk of exploitation. Avoid using the lf parameter in this URI until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-5716

Affected Products

Reprise License Manager

References · 4

• 🔥 http://0x90.zone/web/path-traversal/2018/02/16/Path-Traversal-Reprise-LM.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-5716 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5716 · Security Note
• https://t.me/cvenotify/120401 · Telegram Post