CVE-2018-15573

An issue was discovered in Reprise License Manager (RLM) through 12.2BL2

published August 20, 2018

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

An issue was discovered in Reprise License Manager (RLM) through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk (as long as rlm.exe has access to it) via /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter. By default, the web interface is on port 5054, and does not require authentication. NOTE: the vendor has stated "We do not consider this a vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02146 · 81.8th percentile
Published
2018-08-20T02:00Z
EPSS history
Timeline
  • 20 AUG 02:00Z
    An issue was discovered in Reprise License Manager (RLM) through 12.2BL2
    cvelistv5