CVE-2021-44152 PoC — Reprise Software Reprise License Manager 访问控制错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44152.yaml

Associated Vulnerability

Title:Reprise Software Reprise License Manager 访问控制错误漏洞 (CVE-2021-44152)
Description:Reprise Software Reprise License Manager是美国Reprise Software公司的软件许可工具包，为商业软件应用程序的发布者提供本地和基于云的许可证管理，许可证实施和产品激活解决方案。 Reprise Software Reprise License Manager14.2存在访问控制错误漏洞，该漏洞允许修改任何现有用户的密码。

Description

Reprise License Manager (RLM) 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user.

File Snapshot


 id: CVE-2021-44152

info:
  name: Reprise License Manager 14.2 - Authentication Bypass
  author: Aki

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!