IQID:13649 HTTP Gemalto Sentinel License Manager 18.0.1.55505 - Unauthenticated File Write S

IQID: 13649 - August 2016

Gemalto Sentinel License Manager could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to the action.html or checkin_file.html script containing "dot dot" sequences (/../) in the alpremove or check_in_file parameter to delete or create arbitrary files on the system.

A Full Description is available for this threat, please sign in for access to Full Description.

 

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

 

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

 

Date

Date Information is available for this threat, please sign in for access to Date Information.

 

External Resources

External resources are available for this threat, please sign in for access to external resources.