CVE-2021-32088

脆弱性の種類

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.

影響を受ける製品

• quest kace_systems_management_appliance

参考情報

• https://support.quest.com/download-product-select
• https://support.quest.com/kace-systems-management-appliance/kb/4293505/quest-response-to-criticalstart-vulnerability-report