CVE-2021-44151 Auth bypass in n/a
Attackers can hijack user sessions by brute-forcing short session cookies, gaining unauthorized access to the Reprise RLM license server interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-44151?
CVE-2021-44151 is a high-severity authentication bypass vulnerability in n/a, published on 13 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). An attacker can obtain the static part of the cookie (cookie name) by first making a request to any page on the application (e.g., /goforms/menu) and saving the name of the cookie sent with the response. The attacker can then use the name of the cookie and try to request that same page, setting a random value for the cookie. If any user has an active session, the page should return with the authorized content, when a valid cookie value is hit.
Weakness: CWE-330
Which versions are affected by CVE-2021-44151?
It affects 1 product.
Products include Reprisesoftware Reprise License Manager.
How do I fix CVE-2021-44151?
No fix has been published for CVE-2021-44151 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-44151 being exploited?
There is no known exploitation of CVE-2021-44151 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2x2v-ccf2-cqcf.