CVE-2021-37499

CVSS 6.5 MEDIUMEPSS 0.9%CWE-74

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://reprise.com http://reprisesoftware.com https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md