675 matches found
PT-2018-17108 · Reprise · Reprise License Manager
Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 11.0 Description: A Path Traversal issue allows an attacker to access files on the server's file system by modifying a field in the web request. Specifically, by specifying a pathname in the lf parameter to the...
Gemalto Sentinel License Manager
CVSS v3 9.9 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Gemalto Equipment: Sentinel License Manager Vulnerability: Null Pointer Dereference, Buffer Overflows, Improper Access Control AFFECTED PRODUCTS The following Sentinel License Manger services are affected: All HASP SR...
The vulnerability of the Sentinel License Manager, related to improper restriction of the path name to the catalog, allows a violator to delete or modify protected files.
The vulnerability of the Sentinel License Manager is related to an incorrect restriction on the path name to the “/int/” directory. Exploiting this vulnerability allows a malicious actor to delete or modify protected files using the “alpremove” and “checkinfile” parameters...
Cisco Enterprise License Manager Information Disclosure Vulnerability
A vulnerability in the web framework of Cisco Enterprise License Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables. An attacker could exploit this vulnerability by browsing to a specific URL. An...
Gemalto HASP SRM, Sentinel HASP and Sentinel LDK Sentinel LDK NTLM Relay Attack Vulnerabilities
Gemalto HASP SRM and Sentinel HASP are both cryptographic lock drivers from Gemalto, U.S.A. Sentinel LDK is a license management tool. A security vulnerability exists in Gemalto HASP SRM, Sentinel HASP, and Sentinel LDK Sentinel LDK RTE versions prior to 7.55. An attacker could exploit this...
Cisco License Manager Server ReportCSV Directory Traversal (CVE-2017-12263)
An information disclosure vulnerability exists in Cisco License Manager Server. The vulnerability is due to insufficient validation on user supplied paths when a request is sent to ReportCSV servlet. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to...
Cisco License Manager Software Directory Traversal Vulnerability
Cisco License Manager Software is a set of license management software from Cisco USA. The software is used to activate Cisco devices and software, and online access to device licenses or product keys. A directory traversal vulnerability exists in the web interface of Cisco License Manager...
CVE-2017-12263
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...
Directory traversal
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...
CVE-2017-12263
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...
CVE-2017-12263
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application that should be restricted, aka Directory Traversal. The issue is due to improper sanitization of user-supplied input in HTTP...
CVE-2017-12263
The CVE-2017-12263 issue affects Cisco License Manager software, specifically its web interface and the ReportCSV servlet. The vulnerability stems from improper sanitization/validation of user-supplied file path parameters, enabling an unauthenticated remote attacker to perform directory traversa...
Cisco License Manager Directory Traversal Information Disclosure Vulnerability
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view files within the application which should be restricted. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that...
Cisco License Manager Server ReportCSV Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Cisco License Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReportCSV servlet, which listens on TCP port 8080 by default...
CVE-2017-5571
CVE-2017-5571 is an open-redirect vulnerability in the lmadmin component of Flexera FlexNet Publisher (aka Flex License Manager) up to version 11.14.1, used in Citrix License Server for Windows and License Server VPX. The vulnerability could enable remote attackers to redirect users to attacker-c...
CVE-2016-8006
Authentication bypass vulnerability in Enterprise Security Manager ESM and License Manager LM in Intel Security McAfee Security Information and Event Management SIEM 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the...
CVE-2016-8006
The CVE-2016-8006 entry describes an authentication bypass in McAfee SIEM products, specifically Enterprise Security Manager (ESM) and License Manager (LM) used with SIEM 9.6.0 MR3. The vulnerability enables an administrator to modify other SIEM users’ information (including passwords) without su...
CVE-2016-8565
Siemens Automation License Manager ALM before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets...