Aller au contenu
Se connecter
8.1 Élevée

CVE-2022-38129 A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in…

Description

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.

Produits et versions touchés

Produit Versions touchées Corrigé en
Keysight Technologies Sensor Management Server Versions non publiées

Autres CVE de Keysight Technologies Sensor Management Server

Les 2 CVE de Keysight Technologies Sensor Management Server →
CVE-2022-38130 The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database… Non notée
Suivre cette CVE