CVE-2019-20504

The Quest KACE K1000 Systems Management Appliance is vulnerable to remote code execution in versions prior to 6.4 SP3 (6.4.120822) . The vulnerability exists in the service/krashrpt.php file, where a remote attacker can execute arbitrary system commands by providing shell metacharacters in the ku...