FlexNet Publisher Knowledge Base

Elevated Privilege issue discovered in FlexNet Publisher License Server

Summary An elevate privilege vulnerability was discovered in the FlexNet Publisher License Server. This article provides details about the vulnerability as well as mitigation and remediation options. Description This elevated privilege vulnerability...

cvirata Revenera Community Admin Oct 14, 2022

security

INDEX: Log4j vulnerability impact on FlexNet Publisher

This article is an extension of the Log4j security advisory and serves to consolidate impact and mitigation details of related Log4j vulnerabilities with regards to FlexNet Publisher. FlexNet Publisher Product Assessment: Product CVE Potential E...

cvirata Revenera Community Admin Jan 10, 2022

Defect Report security

CVE-2019-8963 Remediated in FlexNet Publisher

Summary A Denial of Service vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using web-based tool. If you do not distribute lmadmin to your customers, there is no further action on you...

cvirata Revenera Community Admin Oct 19, 2021

lmadmin security vulnerability

Security Advisory for default flexlm location

If no specific location for license file is specified, then the following default location is used. Relying on this default location is not recommended.• On UNIX, the default location is /usr/local/flexlm/licenses/license.dat.• On Windows, the defau...

by jyadav Flexera Alumni Aug 26, 2021

Advisory C:flexlm FlexLM security security advisory location usr:local:flexlm

Lmadmin API's Additional Information

FNP Product document hints at APIs that are available for lmadmin.* "lmadmin provides a Web service interface that exposes certain APIs that can be called from a custom-built utility. These services enable you to extend the core license server capab...

by jyadav Flexera Alumni Aug 26, 2021

alerter API FNP getAlerts getSessionId lmadmin lmadmin_install_dir runalerter security server SMTP Soap wsdl

Elevated Privilege Issue with FlexNet Publisher Licensing Service on Windows

Summary A local privilege escalation issue could give passage for exploit on Windows, has been reported on an optional service of FlexNet Publisher (FNP), usually used with trusted storage. If you do not depend on FlexNet Licensing Service, there i...

cvirata Revenera Community Admin May 19, 2021

Defect security

Malwarebytes blocks FlexNet Publisher Licensing Service as possible trojan

The following error message has been reported by customers running the FlexNet Publisher licensing service and Malwarebytes: This error has been identified as a false positive and has been resolved by Malwarebytes. A Malwarebytes forum thread confi...

cvirata Revenera Community Admin Oct 19, 2020

Licensing Service security

CVE-2020-12081 Remediated in FlexNet Publisher

Summary A Disclosure of sensitive information vulnerability existed in lmadmin systems. The web portal link can be used to access to system files or other important files on the system. The vulnerability was discovered in FlexNet Publisher's lmadmin...

cvirata Revenera Community Admin Jul 05, 2020

lmadmin security vulnerability

CVE-2020-12080 Remediated in FlexNet Publisher

Summary A Denial of Service vulnerability was discovered, on Certain message protocol in FlexNet Publisher's lmadmin 11.16.6. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no further a...

cvirata Revenera Community Admin Apr 23, 2020

lmadmin security vulnerability

Customizing Apache HTTP Server configuration using httpConfExtra for lmadmin of FlexNet Publisher

This article is about customizing the default Apache HTTP Server configuration that comes with lmadmin.exe of FlexNet Publisher. If you do not distribute lmadmin to your customers, this article may not be of relevance. Lmadmin allows customization o...

cvirata Revenera Community Admin Mar 20, 2020

Best Practice Customization lmadmin security

CVE-2019-8962 remediated in FlexNet Publisher

Summary: A Cross-Site Request Forgery which results in addition of local admin user to lmadmin license server has been identified in FlexNet Publisher lmadmin.exe 11.10.X. Please see the Symptoms section for more details. If you do not distribute lm...

cvirata Revenera Community Admin Jan 22, 2020

FlexNet Publisher lmadmin security vulnerability

CVE-2019-8961 remediated in FlexNet Publisher

Summary A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no f...

cvirata Revenera Community Admin Nov 21, 2019

FlexNet Publisher security vulnerability

CVE-2019-8960 remediated in FlexNet Publisher

Summary A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no f...

cvirata Revenera Community Admin Nov 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20031 remediated in FlexNet Publisher

Summary CVE-2018-20031 has been discovered and remediated in FlexNet Publisher Symptoms ****Only the following information is permitted to be distributed outside of Flexera Software and customers of FlexNet Publisher: - CVE number - CWE...

cvirata Revenera Community Admin Mar 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20031

CVE-2018-20032 remediated in FlexNet Publisher

Summary CVE-2018-20032 has been discovered and remediated in FlexNet Publisher Symptoms ****Only the following information is permitted to be distributed outside of Flexera Software and customers of FlexNet Publisher: - CVE number - CWE...

cvirata Revenera Community Admin Mar 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20032

Featured Articles

Featured article

New to FlexNet Publisher and not sure where to start? Then this article is for you! In this guide, we outline your next steps in order to have a successful journey with the FlexNet Publisher product. Obtain Your Producer Information Upon purchasing FlexNet Publisher, you should have received two emails from Revenera: Order Confirmation email: This email not only contains your organization's order information, but it also contains your organization's [Account ID] and [Product ID] details required to register for the Revenera Community. Note: Registering on the Revenera Community with your Account ID and Product ID, as well as approved access to the Product and License Center, is mandatory to download the FlexNet Publisher product and its resources. Production Keys email: This email contains your organization's producer information (vendor and vendor keys) required to build your FlexNet Publisher licensed application and other licensing components. Access the Product and Other Product Resources 1. Register for the Revenera Community Using the Account ID and Product ID details from the order confirmation email, sign up for the Revenera Community. Check out our Welcome to the Revenera Community help article for more information. 2. Get access to the Product and License Center If you are the original recipient of the order confirmation email, you were automatically designated your organization's Product and License Center Administrator (PLC Admin). With the PLC Admin role, you can manage Product and License Center access for your team members once they sign up for the community. This can be done using the Product and License Center User Administration page. If you were not the original recipient of the order confirmation email, you will need to sign up for the community and request access from your PLC Admin. If you do not know who in your organization has the PLC Admin role, please contact Revenera Technical Support for assistance. 3. Download the product Once you've gained access to the Product and License Center, navigate to Product List -> FlexNet Licensing -> FlexNet Publisher. From here you can download the FlexNet Publisher local license server and toolkit by platform. 4. Access product documentation Download the FlexNet Publisher Documentation Library file for developer related documentation. This is available on the Product and License Center under Product List -> FlexNet Licensing -> FlexNet Publisher -> FlexNet Publisher Documentation. For license server administration documentation, visit the FlexNet Publisher section of the Documentation Site. Prepare Your Build Environment Follow the instructions in the following documents to install your FlexNet Publisher toolkit and prepare your development environment: FlexNet Publisher Installation Guide FlexNet Publisher Development Environment Guide These guides are included in the FlexNet Publisher Documentation Library file. Stay Up to Date Be sure to subscribe to the FlexNet Publisher News blog to receive product release and other important notifications. You can also subscribe to the Software Monetization Release Schedule* to keep track of upcoming FlexNet Publisher releases. *Note: Requires community login Learn More or Get Help The Revenera Community offers a variety of resources to learn about the FlexNet Publisher product: Search the FlexNet Publisher Knowledge Base for how-to, faq, and problem type articles. The Revenera Learning Center* current hosts several recordings from our live customer events. In the future, the learning center will host our FlexNet Publisher training videos. If you run into a problem or have questions, you can use the following resources: Post a question on the FlexNet Publisher Forum* and learn from your peers and other FlexNet Publisher product experts. Open a new case online using the Get Support -> Open New Case* form. *Note: Requires community login

FlexNet Publisher Knowledge Base