CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44152

An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user can change the password of any existing user. This allows an attacker to change the password of any known user, thereby preventing valid users from accessing the system and granting the attacker full access to that user's account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.867

EPSS Ranking 99.4%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2021-44152

Reprisesoftware » Reprise License Manager » Version: 11.0

cpe:2.3:a:reprisesoftware:reprise_license_manager:11.0
Reprisesoftware » Reprise License Manager » Version: 11.1

cpe:2.3:a:reprisesoftware:reprise_license_manager:11.1
Reprisesoftware » Reprise License Manager » Version: 11.2

cpe:2.3:a:reprisesoftware:reprise_license_manager:11.2
Reprisesoftware » Reprise License Manager » Version: 11.3

cpe:2.3:a:reprisesoftware:reprise_license_manager:11.3
Reprisesoftware » Reprise License Manager » Version: 12.0

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.0
Reprisesoftware » Reprise License Manager » Version: 12.0bl2

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.0bl2
Reprisesoftware » Reprise License Manager » Version: 12.1

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.1
Reprisesoftware » Reprise License Manager » Version: 12.1bl2

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.1bl2
Reprisesoftware » Reprise License Manager » Version: 12.2

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.2
Reprisesoftware » Reprise License Manager » Version: 12.2bl2

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.2bl2
Reprisesoftware » Reprise License Manager » Version: 12.3

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.3
Reprisesoftware » Reprise License Manager » Version: 12.3bl4

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.3bl4
Reprisesoftware » Reprise License Manager » Version: 12.4

cpe:2.3:a:reprisesoftware:reprise_license_manager:12.4
Reprisesoftware » Reprise License Manager » Version: 13.0

cpe:2.3:a:reprisesoftware:reprise_license_manager:13.0
Reprisesoftware » Reprise License Manager » Version: 14.2

cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2
Reprisesoftware » Reprise License Manager » Version: 14.2bl4

cpe:2.3:a:reprisesoftware:reprise_license_manager:14.2bl4
Reprisesoftware » Reprise License Manager » Version: 15.0

cpe:2.3:a:reprisesoftware:reprise_license_manager:15.0
Reprisesoftware » Reprise License Manager » Version: 9.0bl2

cpe:2.3:a:reprisesoftware:reprise_license_manager:9.0bl2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44152

Products

Pricing

Contact Us