PT-2024-13166 · Reprise · Reprise License Manager

Mohaiman Rahim · Published 2024-02-03 · Updated 2025-04-30 · CVE-2023-44031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Reprise License Manager version 15.1

Description The issue is related to incorrect access control in the software, allowing attackers to save sensitive files in insecure locations using a crafted POST request.

Recommendations For Reprise License Manager version 15.1, consider restricting access to sensitive file operations until a patch is available. As a temporary workaround, limit the ability to save files in insecure locations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-44031

Affected Products

Reprise License Manager

References · 10

• https://osv.dev/vulnerability/CVE-2023-44031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44031 · Security Note
• http://seclists.org/fulldisclosure/2024/Jan/43 · Note
• https://t.me/cvenotify/92215 · Telegram Post
• https://t.me/cvenotify/120400 · Telegram Post
• http://packetstormsecurity.com/files/176841/Reprise-License-Manager-15.1-Privilege-Escalation-File-Write.html · Note
• https://t.me/cvenotify/71165 · Telegram Post
• https://t.me/cvenotify/69933 · Telegram Post
• https://twitter.com/CVEnew/status/1753699440341213431 · Twitter Post
• https://packetstormsecurity.com/files/176841/Reprise-License-Manager-15.1-Privilege-Escalation-File-Write.html · Note