Path Traversal Vulnerability in NVIDIA BMC's SPX REST Auth Handler

CVE-2022-42280

What is CVE-2022-42280?

NVIDIA BMC has been discovered to have a vulnerability in its SPX REST authentication handler. This flaw allows unauthorized attackers to exploit a path traversal issue, potentially leading to an authentication bypass. Such vulnerabilities can undermine the security measures in place, allowing attackers to gain access to sensitive data or administrative functions without proper credentials, posing significant risks to the integrity of the system.

References