Flexera FlexNet Publisher: Remote code execution in lmadmin web interface
A remote code execution vulnerability exists in the lmadmin web user interface of FlexNet Publisher, licence-management software that runs on licence servers. An attacker with high privileges on the lmadmin interface can execute code on the server, with high impact on confidentiality, integrity and availability. The CVSS vector requires no user interaction, but the attacker needs administrative access to the interface, so exposure of the web UI determines the practical risk.
Flexera · FlexNet Publisher
