SafeNet Sentinel Web Interface Remote Directory Traversal Vulnerability
Description
A vulnerability has been identified in SafeNet Sentinel Protection Server and Sentinel Keys Server, which could be exploited by attackers to bypass security restrictions and gain knowledge of sensitive information. This issue is caused by an input validation error in the web interface when handling specially crafted HTTP requests containing backslash characters, which could be exploited by remote attackers to access and read the contents of arbitrary files via a directory traversal.
Vulnerable Products
Vulnerable Software: SafeNet Sentinel Protection Server version 7.4.1 and priorSafeNet Sentinel Keys Server version 1.0.4 and prior
