CVE-2021-32088

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie...

PT-2026-65310

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie...

CVE-2021-32088

CVE-2021-32088 affects Quest KACE Systems Deployment Appliance (SMA) 11.0.273. The vulnerability arises because a rate-limiting protection on certain API endpoints can be bypassed by removing the kboxid cookie, potentially allowing more brute-force attempts than intended. The available documents ...