PT-2020-6874 · Flexnet+1 · Lmadmin+1

Published 2020-06-01 · Updated 2025-02-19 · CVE-2019-8963

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions FlexNet Publisher's lmadmin version 11.16.5

Description A Denial of Service (DoS) issue was found in FlexNet Publisher's lmadmin, related to resource release errors. This can be exploited by a remote attacker to cause a service disruption, potentially through a crafted POST request on the lmadmin web-based tool.

Recommendations For FlexNet Publisher's lmadmin version 11.16.5, consider restricting access to the web-based tool to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the ability to perform crafted POST requests on lmadmin may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2023-02700

CVE-2019-8963

Affected Products

Flexnet Publisher

Lmadmin

References · 7

• https://community.flexera.com/t5/FlexNet-Publisher-Knowledge-Base/CVE-2019-8963-Remediated-in-FlexNet-Publisher/ta-p/148768 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02700 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-8963 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8963 · Vendor Advisory
• https://t.me/cvenotify/111792 · Telegram Post
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-07 · Note
• https://vuldb.com/ru/?id.190193 · Note