CVE-2021-44151
Last modified
CVE-2021-44151 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). EPSS estimates a 2.53% chance of exploitation in the next 30 days.
Description
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). An attacker can obtain the static part of the cookie (cookie name) by first making a request to any page on the application (e.g., /goforms/menu) and saving the name of the cookie sent with the response. The attacker can then use the name of the cookie and try to request that same page, setting a random value for the cookie. If any user has an active session, the page should return with the authorized content, when a valid cookie value is hit.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Reprisesoftware | Reprise License Manager | >= 14.2, < 15.1 |
References
- http://packetstormsecurity.com/files/165191/Reprise-License-Manager-14.2-Session-Hijacking.htmlThird Party Advisory, VDB Entry
- https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesProduct, Vendor Advisory
- http://packetstormsecurity.com/files/165191/Reprise-License-Manager-14.2-Session-Hijacking.htmlThird Party Advisory, VDB Entry
- https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesProduct, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-44151?
How severe is CVE-2021-44151?
How do I fix CVE-2021-44151?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-44145In the TransformXML processor of Apache NiFi before 1.15.1 a…6.5
- CVE-2021-44147An XML External Entity issue in Claris FileMaker Pro and Ser…5.5
- CVE-2021-44148GL.iNet GL-AR150 2.x before 3.x devices, configured as repea…6.1
- CVE-2021-44149An issue was discovered in Trusted Firmware OP-TEE Trusted O…7.8
- CVE-2021-4415The Sunshine Photo Cart plugin for WordPress is vulnerable t…4.3
- CVE-2021-44150The client in tusdotnet through 2.5.0 relies on SHA-1 to pre…7.5
- CVE-2021-44152An issue was discovered in Reprise RLM 14.2. Because /goform…9.8
- CVE-2021-44153An issue was discovered in Reprise RLM 14.2. When editing th…7.2
- CVE-2021-44154An issue was discovered in Reprise RLM 14.2. By using an adm…7.2
- CVE-2021-44155An issue was discovered in /goform/login_process in Reprise …5.3
- CVE-2021-44158ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buff…8
- CVE-2021-441594MOSAn GCB Doctor’s file upload function has improper user p…9.8
Are you affected by CVE-2021-44151?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST