CVE-2021-44155: Reprisesoftware Reprise License Manager

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.

Affected products

• Reprisesoftware Reprise License Manager: from 14.2, before 15.1 (fixed in 15.1)

Published 2021-12-13. Last modified 2026-06-17.