CVE-2021-44155

An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.

• CWE-209

• http://packetstormsecurity.com/files/165182/Reprise-License-Manager-14.2-User-Enumeration.htmlExploit, Third Party Advisory, VDB Entry
• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesPatch, Product, Vendor Advisory
• https://www.reprisesoftware.com/RELEASE_NOTESBroken Link
• http://packetstormsecurity.com/files/165182/Reprise-License-Manager-14.2-User-Enumeration.htmlExploit, Third Party Advisory, VDB Entry
• https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yesPatch, Product, Vendor Advisory
• https://www.reprisesoftware.com/RELEASE_NOTESBroken Link

Published

Dec 13, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4415The Sunshine Photo Cart plugin for WordPress is vulnerable t…4.3
• CVE-2021-44150The client in tusdotnet through 2.5.0 relies on SHA-1 to pre…7.5
• CVE-2021-44151An issue was discovered in Reprise RLM 14.2. As the session …7.5
• CVE-2021-44152An issue was discovered in Reprise RLM 14.2. Because /goform…9.8
• CVE-2021-44153An issue was discovered in Reprise RLM 14.2. When editing th…7.2
• CVE-2021-44154An issue was discovered in Reprise RLM 14.2. By using an adm…7.2
• CVE-2021-44158ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buff…8
• CVE-2021-441594MOSAn GCB Doctor’s file upload function has improper user p…9.8
• CVE-2021-4416The wp-mpdf plugin for WordPress is vulnerable to Cross-Site…4.3
• CVE-2021-44160Carinal Tien Hospital Health Report System’s login page has …7.3
• CVE-2021-44161Changing MOTP (Mobile One Time Password) system’s specific f…8.8
• CVE-2021-44162Chain Sea ai chatbot system’s specific file download functio…7.5