CVE-2018-11142 - The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE S

CVE-2018-11142

Summary

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

References

https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities

Vulnerable Configurations

cpe:2.3:a:quest:kace_system_management_appliance:8.0.318:*:*:*:*:*:*:*
cpe:2.3:a:quest:kace_system_management_appliance:8.0.318:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:

CWE

CWE-863

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:N/A:P

refmap via4

misc

https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities

Last major update

03-10-2019 - 00:03

Published

31-05-2018 - 18:29

Last modified

03-10-2019 - 00:03