{"uuid": "4b129584-568b-4e25-b58b-db1f78cc13a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44151", "type": "seen", "source": "https://t.me/hacking_Attack/34186", "content": "Exploit Collector\nReprise License Manager 14.2 Session Hijacking\n\nhttps://4.bp.blogspot.com/-OTiSJPLOhfQ/WWlvdFudhmI/AAAAAAAAIPg/Ji3s4Viv0XwGl76TD9pbO-WowW5kHfgewCLcBGAs/s1600/h78.png \nReprise License Manager version 14.2 suffers from an unauthenticated session hijacking vulnerability via brute forcing.\n\nMD5 | a1dffd2c337ea3b468c88a04bf944708\n\nDownload\n\n# Product: Reprise License Manager 14.2\n# Vendor: Reprise Software \n# CVE ID: CVE-2021-44151\n# Vulnerability Title: Unauthenticated Session Hijacking\n# Severity: Medium/High \n# Author(s): Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard \n# Date: 2021-11-25\n#############################################################\nIntroduction:\nAs the session cookies are short and simple, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 characters). An attacker can obtain the static part of the cookie (cookie name) by first making a request to any page on the application (e.g.,/goforms/menu) and saving the name of the cookie sent with the response.\nThe attacker can then use the name of the cookie and try to request that same page, setting a random value for the cookie. If any user has an active session, the page should return with the authorized content, when a valid cookie value is hit.\n\nVulnerability:\nDue to the session cookies being rather simple and predictable, a single session, can be brute forced in less than 3 minutes, on a laptop, and can therefore be considered very insecure.\n\nRecommendation:\nIt is recommended to follow industry standards and use secure randomized complex session cookies which expire when not in use or the user de-authenticates.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.442145Z"}