67 matches found
CVE-2018-15573
An issue was discovered in Reprise License Manager RLM through 12.2BL2. Attackers can use the web interface to read and write data to any file on disk as long as rlm.exe has access to it via /goform/editlfprocess with file content in the lfdata parameter and a pathname in the lf parameter. By...
CVE-2018-15574
An issue was discovered in the license editor in Reprise License Manager RLM through 12.2BL2. It is a cross-site scripting vulnerability in the /goform/editlfgetdata lf parameter via GET or POST. NOTE: the vendor has stated "We do not consider this a vulnerability."...
CVE-2018-15573
CVE-2018-15573 : Reprise License Manager (RLM) up to 12.2BL2 is exposed via a web interface on port 5054 that does not require authentication. An unauthenticated attacker can use /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter to read and write...
CVE-2018-15574
CVE-2018-15574 describes a cross-site scripting vulnerability in the Reprise License Manager (RLM) license editor up to version 12.2BL2. The issue is triggered via the /goform/edit_lf_get_data endpoint, using the lf parameter over GET or POST. Evidence in connected sources confirms the vulnerabil...
CVE-2016-0325
CVE-2016-0325 affects IBM Jazz-based CLM stack (Rational CLM/RQM/RRTC/RDNG/RELM/RSA DM and related) with multiple versions vulnerable prior to specific iFixes. The issue allows an authenticated remote attacker to execute arbitrary OS commands via a crafted HTTP request, impacting several CLM comp...
DEBIAN-CVE-2005-4746
Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of service crash via 1 the rlmsqlcounter module or 2 unknown vectors "while expanding %t"...