FlexNet Publisher Knowledge Base

OpenSSL Vulnerability : CVE-2023-0286, CVE-2023-0215, CVE-2022-4450 and CVE-2022-4304

Question Whether FlexNet Publisher is impacted by the OpenSSL vulnerability CVE-2023-0286, CVE-2023-0215, CVE-2022-4450 and CVE-2022-4304 and when this will be fixed. Answer Vulnerability CVE-2023-0286, CVE-2023-0215, CVE-2022-4450 and CVE-2022-4304...

mrathinam Revenera Moderator May 18, 2023

FNP 11.19.4 OpenSSL vulnerability

Vulnerability : CVE-2022-2097 and CVE-2022-2068

Question: Whether FlexNet Publisher is impacted by the vulnerability CVE-2022-2097 and CVE-2022-2068?. Answer: Vulnerability CVE-2022-2068 is observed in FlexNet Publisher as per the scan report in the latest FNP version to resolve this issue Open...

mrathinam Revenera Moderator Aug 17, 2022

CVE-2022-2068 CVE-2022-2097 OpenSSL vulnerability

Vulnerability: CVE-2021-44832 Log4j vulnerability impact on FlexNet Publisher

Summary: A vulnerability identified as CVE-2021-44832 has been reported Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration us...

mrathinam Revenera Moderator Jul 20, 2022

11.19.1.0 CVE-2021-44832 Log4j vulnerability

Vulnerability : CVE-2022-30190 and CVE-2022-30136

Question: Whether FlexNet Publisher is impacted by the vulnerability CVE-2022-30190 and CVE-2022-30136 Answer: FlexNet Publisher does not use NFS or MSDT in the solution. Hence FNP is not vulnerable to these attacks or exploits. Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-30190...

mrathinam Revenera Moderator Jul 13, 2022

CVE-2022-30136 CVE-2022-30190 MSDT NFS vulnerability

CVE-2021-44832 Log4j vulnerability impact on FlexNet Publisher

Summary: Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify the logging configuration file can constru...

mrathinam Revenera Moderator Jan 04, 2022

CVE-2021-44832 JNDI vulnerability

Impact of CVE-2017-5571 : Open Redirect Vulnerability in lmadmin component of Flexera FlexNet Publisher

Impact: CVE-2017-5571: Open Redirect Vulnerability in lmadmin component of Flexera FlexNet Publisher up to and including version 11.14.1 Solution: Since the version of FNP which is 11.14.1.x or later has been fixed CVE-2017-5571, better to use th...

mrathinam Revenera Moderator Nov 18, 2021

CVE-2017-5571 lmadmin vulnerability

CVE-2019-8963 Remediated in FlexNet Publisher

Summary A Denial of Service vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin using web-based tool. If you do not distribute lmadmin to your customers, there is no further action on you...

cvirata Revenera Community Admin Oct 19, 2021

lmadmin security vulnerability

CVE-2020-12081 Remediated in FlexNet Publisher

Summary A Disclosure of sensitive information vulnerability existed in lmadmin systems. The web portal link can be used to access to system files or other important files on the system. The vulnerability was discovered in FlexNet Publisher's lmadmin...

cvirata Revenera Community Admin Jul 05, 2020

lmadmin security vulnerability

CVE-2020-12080 Remediated in FlexNet Publisher

Summary A Denial of Service vulnerability was discovered, on Certain message protocol in FlexNet Publisher's lmadmin 11.16.6. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no further a...

cvirata Revenera Community Admin Apr 23, 2020

lmadmin security vulnerability

CVE-2019-8962 remediated in FlexNet Publisher

Summary: A Cross-Site Request Forgery which results in addition of local admin user to lmadmin license server has been identified in FlexNet Publisher lmadmin.exe 11.10.X. Please see the Symptoms section for more details. If you do not distribute lm...

cvirata Revenera Community Admin Jan 22, 2020

FlexNet Publisher lmadmin security vulnerability

CVE-2019-8961 remediated in FlexNet Publisher

Summary A Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no f...

cvirata Revenera Community Admin Nov 21, 2019

FlexNet Publisher security vulnerability

CVE-2019-8960 remediated in FlexNet Publisher

Summary A Denial of Service vulnerability related to command handling has been identified in FlexNet Publisher lmadmin.exe 11.16.2. Please see the Symptoms section for more details. If you do not distribute lmadmin to your customers, there is no f...

cvirata Revenera Community Admin Nov 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20031 remediated in FlexNet Publisher

Summary CVE-2018-20031 has been discovered and remediated in FlexNet Publisher Symptoms ****Only the following information is permitted to be distributed outside of Flexera Software and customers of FlexNet Publisher: - CVE number - CWE...

cvirata Revenera Community Admin Mar 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20031

CVE-2018-20032 remediated in FlexNet Publisher

Summary CVE-2018-20032 has been discovered and remediated in FlexNet Publisher Symptoms ****Only the following information is permitted to be distributed outside of Flexera Software and customers of FlexNet Publisher: - CVE number - CWE...

cvirata Revenera Community Admin Mar 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20032

CVE-2018-20033 remediated in FlexNet Publisher

Summary CVE-2018-20033 has been discovered and remediated in FlexNet Publisher Symptoms ****Only the following information is permitted to be distributed outside of Flexera Software and customers of FlexNet Publisher: - CVE number - CWE...

cvirata Revenera Community Admin Mar 21, 2019

FlexNet Publisher security vulnerability

CVE-2018-20033

Featured Articles

Featured article

New to FlexNet Publisher and not sure where to start? Then this article is for you! In this guide, we outline your next steps in order to have a successful journey with the FlexNet Publisher product. Obtain Your Producer Information Upon purchasing FlexNet Publisher, you should have received two emails from Revenera: Order Confirmation email: This email not only contains your organization's order information, but it also contains your organization's [Account ID] and [Product ID] details required to register for the Revenera Community. Note: Registering on the Revenera Community with your Account ID and Product ID, as well as approved access to the Product and License Center, is mandatory to download the FlexNet Publisher product and its resources. Production Keys email: This email contains your organization's producer information (vendor and vendor keys) required to build your FlexNet Publisher licensed application and other licensing components. Access the Product and Other Product Resources 1. Register for the Revenera Community Using the Account ID and Product ID details from the order confirmation email, sign up for the Revenera Community. Check out our Welcome to the Revenera Community help article for more information. 2. Get access to the Product and License Center If you are the original recipient of the order confirmation email, you were automatically designated your organization's Product and License Center Administrator (PLC Admin). With the PLC Admin role, you can manage Product and License Center access for your team members once they sign up for the community. This can be done using the Product and License Center User Administration page. If you were not the original recipient of the order confirmation email, you will need to sign up for the community and request access from your PLC Admin. If you do not know who in your organization has the PLC Admin role, please contact Revenera Technical Support for assistance. 3. Download the product Once you've gained access to the Product and License Center, navigate to Product List -> FlexNet Licensing -> FlexNet Publisher. From here you can download the FlexNet Publisher local license server and toolkit by platform. 4. Access product documentation Download the FlexNet Publisher Documentation Library file for developer related documentation. This is available on the Product and License Center under Product List -> FlexNet Licensing -> FlexNet Publisher -> FlexNet Publisher Documentation. For license server administration documentation, visit the FlexNet Publisher section of the Documentation Site. Prepare Your Build Environment Follow the instructions in the following documents to install your FlexNet Publisher toolkit and prepare your development environment: FlexNet Publisher Installation Guide FlexNet Publisher Development Environment Guide These guides are included in the FlexNet Publisher Documentation Library file. Stay Up to Date Be sure to subscribe to the FlexNet Publisher News blog to receive product release and other important notifications. You can also subscribe to the Software Monetization Release Schedule* to keep track of upcoming FlexNet Publisher releases. *Note: Requires community login Learn More or Get Help The Revenera Community offers a variety of resources to learn about the FlexNet Publisher product: Search the FlexNet Publisher Knowledge Base for how-to, faq, and problem type articles. The Revenera Learning Center* current hosts several recordings from our live customer events. In the future, the learning center will host our FlexNet Publisher training videos. If you run into a problem or have questions, you can use the following resources: Post a question on the FlexNet Publisher Forum* and learn from your peers and other FlexNet Publisher product experts. Open a new case online using the Get Support -> Open New Case* form. *Note: Requires community login

FlexNet Publisher Knowledge Base