CVE-2021-44031

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...

PT-2021-24022

Name of the Vulnerable Software and Affected Versions: Quest KACE Desktop Authority versions prior to 11.2 Description: An issue was discovered in Quest KACE Desktop Authority that could allow pre-authentication remote code execution. The API endpoint...

CVE-2021-44031: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...