Quest.KACE.System.Management.Path.Traversal
Description
This indicates an attack attempt to exploit a Directory Traversal Vulnerability in Quest KACE System Management Appliance.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker can exploit this to gain unauthorized access to files on the system.
Affected Products
Quest KACE System Management Appliance 7.0.121306 and prior
Quest KACE System Management Appliance 7.1.149 and prior
Quest KACE System Management Appliance 7.2.103 and prior
Quest KACE System Management Appliance 8.0.319 and prior
Quest KACE System Management Appliance 8.1.107 and prior
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.quest.com/kace-systems-management-appliance/kb/254193/security-vulnerability-patch-sec2018_20180410-
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |
Version Updates
Date | Version | Detail |
---|---|---|
2019-06-06 | 14.627 | Severity:high:critical |