CVE-2018-11132

CVE-2018-11132 is a command-injection vulnerability affecting Quest KACE System Management Appliance version 8.0.318. The issue resides in the message queue daemon, which runs with root privileges and allows a restricted command set; an input vector enables an attacker to append commands that are...