Reprise License Manager 漏洞列表

Reprise License Manager (RLM) 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user.

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET.

Reprise License Manager 14.2 contains a reflected cross-site scripting vulnerability in the /goform/login_process 'username' parameter via GET, whereby no authentication is required.

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture and file/directory information. An attacker can possibly obtain further sensitive information, modify data, and/or execute unauthorized operations.

Reprise License Manager (RLM) 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user.

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET.

Reprise License Manager 14.2 contains a reflected cross-site scripting vulnerability in the /goform/login_process 'username' parameter via GET, whereby no authentication is required.

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture and file/directory information. An attacker can possibly obtain further sensitive information, modify data, and/or execute unauthorized operations.

Reprise License Manager存在跨站脚本漏洞，此漏洞是缺乏校验导致的。

Reprise License Manager (RLM) 14.2不验证身份验证或授权，允许未经身份验证的用户更改任何现有用户的密码。

Reprise Software Reprise License Manager是美国RepriseSoftware公司的软件许可工具包，为商业软件应用程序的发布者提供本地和基于云的许可证管理，许可证实施和产品激活解决方案。/goform/login_process "username" 参数存在xss漏洞

Reprise Software Reprise License Manager是美国RepriseSoftware公司的软件许可工具包，为商业软件应用程序的发布者提供本地和基于云的许可证管理，许可证实施和产品激活解决方案。 Reprise SoftwareReprise License Manager 14.2存在信息泄露漏洞