Reprise.License.Manager.Directory.Traversal

description-logoDescription

This indicates an attack attempt to exploit a Directory Traversal vulnerability in the Reprise License Manager.
The vulnerability is caused by an improper validation of user supplied data when the vulnerable application handles a maliciously crafted request. An attacker can exploit this to gain access to sensitive information in the context of the vulnerable application via a crafted HTTP request.

affected-products-logoAffected Products

Reprise Software License Manager 11.3BL1 and prior

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems

recomended-action-logoRecommended Actions

Currently we are unaware of any vendor supplied patch for this issue

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

ZDI-15-417 ZDI-15-418