Threat Encyclopedia

Quest.KACE.System.Management.Path.Traversal

description-logoDescription

This indicates an attack attempt to exploit a Directory Traversal Vulnerability in Quest KACE System Management Appliance.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker can exploit this to gain unauthorized access to files on the system.

affected-products-logoAffected Products

Quest KACE System Management Appliance 7.0.121306 and prior
Quest KACE System Management Appliance 7.1.149 and prior
Quest KACE System Management Appliance 7.2.103 and prior
Quest KACE System Management Appliance 8.0.319 and prior
Quest KACE System Management Appliance 8.1.107 and prior

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

CVE References

CVE-2018-11141