Server side request forgery (ssrf)

2023-01-2012:15:00

PRIOn knowledge base

www.prio-n.com

ssrf

reprise license manager

remote request

port scans

license activation

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.1%

JSON

An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.

CPENameOperatorVersion
reprise_license_managereq<= 14.2bl4

CPE	Name	Operator	Version
	reprise_license_manager	eq	<= 14.2bl4

References

reprise.com

reprisesoftware.com

github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md