.. / CVE-2022-28365

• Info Disclosure
• Nuclei
• Web

Exploit for Reprise License Manager 14.2 - Information Disclosure (CVE-2022-28365)

Description:

Reprise License Manager 14.2 is susceptible to information disclosure via a GET request to /goforms/rlminfo. No authentication is required. The information disclosed is associated with software versions, process IDs, network configuration, hostname(s), system architecture and file/directory information. An attacker can possibly obtain further sensitive information, modify data, and/or execute unauthorized operations.

Nuclei Template

View the template here CVE-2022-28365.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-28365.yaml

References: