CVE-2018-5716

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 11.0

Description: A Path Traversal issue allows an attacker to access files on the server's file system by modifying a field in the web request. Specifically, by specifying a pathname in the lf parameter to the "goform/edit lf get data" URI, an attacker can retrieve the content of a file.

Recommendations: For Reprise License Manager version 11.0, consider restricting access to the "goform/edit lf get data" URI to minimize the risk of exploitation. Avoid using the lf parameter in this URI until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.