The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.tenable.com/security/research/tra-2022-28 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: tenable
Published: 2022-08-10T16:05:39
Updated: 2024-08-03T10:45:52.432Z
Reserved: 2022-08-10T00:00:00
Link: CVE-2022-38130
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-08-10T20:16:06.777
Modified: 2022-08-15T16:11:11.703
Link: CVE-2022-38130
Redhat
No data.