Skip to content
OpenAdvisories
High · 8.1 CVE-2022-38129 EUVD-2022-40731GHSA-4f3p-5vq4-2r5c

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor …

Published Aug 10, 2022 · Updated Aug 27, 2025 · Assigned by tenable

Description

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.

Affected products

VendorProductAffectedFixed
— Keysight Technologies Sensor Management Server Keysight Technologies Sensor Management Server v2.4.0 —

References