CVE-2022-38129

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile method in the Keysight Sensor Management Server SMS. This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host...

Keysight Technologies Sensor Management Server addLicenseFile Path Traversal (CVE-2022-38129)

Binary data keysightsmscve-2022-38129.nbin...

CVE-2022-38129

CVE-2022-38129 describes a path-traversal vulnerability in the Keysight Sensor Management Server (SMS) affecting the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method. An unauthenticated remote attacker can upload arbitrary files to the SMS host. Multiple sources confirm the ...