.. / CVE-2021-44152

• Auth Bypass
• Nuclei
• Web

Exploit for Reprise License Manager 14.2 - Authentication Bypass (CVE-2021-44152)

Description:

Reprise License Manager (RLM) 14.2 does not verify authentication or authorization and allows unauthenticated users to change the password of any existing user.

Nuclei Template

View the template here CVE-2021-44152.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-44152.yaml

References: