An issue was discovered in Reprise RLM 14.2. By using an... · CVE-2021-44154 · GitHub Advisory Database · GitHub

An issue was discovered in Reprise RLM 14.2. By using an...

High severity Unreviewed Published Dec 14, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/edit_opt, which will then be triggered when running the diagnostics (via /goform/diagnostics_doit), resulting in a buffer overflow.

References

Published by the National Vulnerability Database

Dec 13, 2021

Published to the GitHub Advisory Database Dec 14, 2021

Last updated Feb 1, 2023