CVE-2022-38129 — n/a / Keysight Technologies Sensor Management Server

CVE-2022-38129

n/a / Keysight Technologies Sensor Management Server PUBLISHED

Description (CNA)

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.

Affected (CNA)

Vendor / product	Versions
n/a / Keysight Technologies Sensor Management Server	affected Keysight Technologies Sensor Management Server v2.4.0

CWE

No CWE identifiers supplied.

References

https://www.tenable.com/security/research/tra-2022-28

ADP enrichment

CVE

No English description supplied.

https://www.tenable.com/security/research/tra-2022-28

CISA-ADP

No English description supplied.

No references supplied.