CVE-2021-37498

{"id": "CVE-2021-37498", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2023-01-20T12:15:10.143", "references": [{"url": "http://reprise.com", "tags": ["Not Applicable"], "source": "cve@mitre.org"}, {"url": "http://reprisesoftware.com", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://reprise.com", "tags": ["Not Applicable"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://reprisesoftware.com", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function."}, {"lang": "es", "value": "Se descubri\u00f3 un problema SSRF en la interfaz web de Reprise License Manager (RLM) hasta 14.2BL4 que permite a atacantes remotos activar solicitudes salientes a servidores de intranet y realizar escaneos de puertos a trav\u00e9s del par\u00e1metro acterver en la funci\u00f3n Activaci\u00f3n de licencia."}], "lastModified": "2024-11-21T06:15:16.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:reprisesoftware:reprise_license_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE5368A7-9052-45AA-A06D-249B118C27A2", "versionEndIncluding": "14.2bl4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}