Skip to content
Sign in
8.1 High

CVE-2022-38129 A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in…

Description

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.

Affected products and versions

Product Affected versions Fixed in
Keysight Technologies Sensor Management Server Versions not published

Other CVEs of Keysight Technologies Sensor Management Server

The 2 CVEs of Keysight Technologies Sensor Management Server →
CVE-2022-38130 The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database… Not rated
Track this CVE