id: CVE-2021-44152 info: name: Reprise License Manager 14.2 - Authentication Bypass author: Akincibor severity: critical description: | Reprise License Manager (RLM) 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user. reference: - https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes - http://packetstormsecurity.com/files/165186/Reprise-License-Manager-14.2-Unauthenticated-Password-Change.html - https://nvd.nist.gov/vuln/detail/CVE-2021-44152 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2021-44152 cwe-id: CWE-287 metadata: verified: true shodan-query: http.html:"Reprise License Manager" google-query: inurl:"/goforms/menu" tags: cve2021,rlm,auth-bypass,packetstorm,cve requests: - method: GET path: - "{{BaseURL}}/goforms/menu" matchers-condition: and matchers: - type: word part: body words: - "RLM Administration Commands" - type: status status: - 200 # Enhanced by mp on 2022/06/03