Vulnerabilities > CVE-2018-11142 - Incorrect Authorization vulnerability in Quest Kace System Management Appliance 8.0.318

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
quest
CWE-863
NVD
Published: 2018-05-31
Updated: 2019-10-03

Summary

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

Vulnerable Configurations

Part Description Count
Application
Quest
1

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/148005/CORE-2018-0004.txt
idPACKETSTORM:148005
last seen2018-06-01
published2018-05-31
reporterCore Security Technologies
sourcehttps://packetstormsecurity.com/files/148005/Quest-KACE-System-Management-Appliance-8.0-Build-8.0.318-XSS-Traversal-Code-Execution-SQL-Injection.html
titleQuest KACE System Management Appliance 8.0 (Build 8.0.318) XSS / Traversal / Code Execution / SQL Injection

References