PT-2018-10326 · Quest · Quest Kace System Management Appliance

Name of the Vulnerable Software and Affected Versions: Quest KACE System Management Appliance version 8.0.318 Description: The issue allows authenticated users to conduct PHP object injection attacks through the script '/adminui/error details.php'. Recommendations: For Quest KACE System Managemen...

CVE-2018-11138: Improper Neutralization of Special Elements used in an OS Command

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system...

CVE-2018-11142: Incorrect Authorization

The 'systemui/settingsnetwork.php' and 'systemui/settingspatching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'XForwardedFor' HTTP headers in a POST request. An anonymous user c...

Quest KACE System Management Appliance 8.0 (Build 8.0.318) XSS / Traversal / Code Execution / SQL Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Quest KACE System Management Appliance Multiple Vulnerabilities 1. Advisory Information Title: Quest KACE System Management Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0004 Advisory URL:...

PT-2018-10327

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns a SQL injection vulnerability, specifically a blind time-based type, in the Quest KACE System Management Appliance. This occurs due to the lack of sanitizati...

Quest KACE Systems Management Command Injection

This module exploits a command injection vulnerability in Quest KACE Systems Management Appliance version 8.0.318 and possibly prior. The downloadagentinstaller.php file allows unauthenticated users to execute arbitrary commands as the web server user www. A valid Organization ID is required. The...

PT-2018-10333

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Virtual Appliance version 8.0.318 Description The issue concerns the /adminui/advisory.php script, where the IMAGES JSON and attachments to remove parameters can be exploited for Directory Traversal attacks. This...

PT-2018-10323

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description A command injection issue exists in the message queue of the Quest KACE System Management Appliance, allowing low-privilege users to execute arbitrary commands with root...

PT-2018-10332

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns the '/common/run report.php' script, where the reportID parameter is not properly sanitized. This leads to a SQL injection vulnerability, specifically an...

CVE-2018-11136: Improper Neutralization of Special Elements used in an SQL Command

The 'orgID' parameter received by the '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection in particular, a blind time-based type...

CVE-2018-11138

The ‘/common/downloadagentinstaller.php’ script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2018-10328

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue allows for the reading of arbitrary files with 'www' privileges via Directory Traversal in the '/common/download attachment.php' script. This can be achieved by abusi...

Quest DR Series Disk Backup Software 4.0.3 Code Execution Vulnerability

Exploit for windows platform in category remote exploits Quest DR Series Disk Backup Multiple Vulnerabilities 1. Advisory Information Title: Quest DR Series Disk Backup Multiple Vulnerabilities Advisory ID: CORE-2018-0002 Advisory URL:...

Quest DR Series Disk Backup Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0002 1. Advisory Information Title: Quest DR Series Disk Backup Multiple Vulnerabilities Advisory ID: CORE-2018-0002 Advisory URL:https://www.coresecurity.com/core-labs/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Date published: 2018-05-31 Date o...

PT-2018-10329

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns the accessibility of the "/common/download agent installer.php" script by anonymous users, which can be exploited to execute arbitrary commands on the system...

CVE-2018-11132: Improper Neutralization of Special Elements used in an OS Command

In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges and only allows a set of commands to be executed. A command injection vulnerability exists within this message queue...

PT-2018-10330

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns the '/common/ajax email connection test.php' script, which is accessible to any authenticated user. This script is susceptible to command injection due to...

Quest DR Series Disk Backup Software 4.0.3 Code Execution

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Quest DR Series Disk Backup Multiple Vulnerabilities 1. Advisory Information Title: Quest DR Series Disk Backup Multiple Vulnerabilities Advisory ID: CORE-2018-0002 Advisory URL:...

CVE-2018-11135: Improperly Controlled Modification of Object Prototype Attributes

The script '/adminui/errordetails.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks...

CVE-2018-11140: Improper Neutralization of Special Elements used in an SQL Command

The 'reportID' parameter received by the '/common/runreport.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection in particular, an error-based type...