Lucene search
PRIOn knowledge basePRION:CVE-2018-11137HistoryMay 31, 2018 - 6:29 p.m.
Directory traversal
2018-05-3118:29:00
PRIOn knowledge base
www.prio-n.com
3
The ‘checksum’ parameter of the ‘/common/download_attachment.php’ script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with ‘www’ privileges via Directory Traversal. No administrator privileges are needed to execute this script.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_system_management_appliance | eq | 8.0.318 |
Related
cve
cve
CVE-2018-11137
2018-05-31 18:29:00
cvelist
cvelist
CVE-2018-11137
2018-05-31 18:00:00
nvd
nvd
CVE-2018-11137
2018-05-31 18:29:00
coresecurity
coresecurity
Quest KACE System Management Appliance Multiple Vulnerabilities
2018-05-31 00:00:00
packetstorm
packetstorm
zdt
zdt
Quest KACE System Management Appliance 8.0 - Multiple Vulnerabilities
2018-06-01 00:00:00