SafeNet Sentinel Protection Server and Sentinel Keys Server are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.

Ask the vendor for an update.

SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and Sentinel Keys Server 1.0.3 and 1.0.4

Send a special crafted HTTP GET request and check the response

• http://www.exploit-db.com/exploits/33428/

---

Updated on 2015-03-25