VULNERABILITY INTELLIGENCE
CVE-2021-37500
CVSS score8.1 HIGH
EPSS probability1.01%
CISA KEVNot currently listed
Published2023-01-20
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Description
Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.
Weakness classification
- nvd@nist.gov: CWE-22
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22
Primary references
- cve@mitre.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory