What is the severity of CVE-2018-11134?

CVE-2018-11134 is considered a high severity vulnerability due to its potential to allow unauthorized users to change any user's password.

How do I fix CVE-2018-11134?

To fix CVE-2018-11134, update the Quest KACE System Management Appliance to a version later than 8.0.318 that addresses this vulnerability.

What are the implications of CVE-2018-11134?

The implications of CVE-2018-11134 include the risk of unauthorized access and privilege escalation to sensitive accounts, including the root account.

What versions of Quest KACE are affected by CVE-2018-11134?

CVE-2018-11134 specifically affects Quest KACE System Management Appliance version 8.0.318.

Can CVE-2018-11134 be exploited remotely?

Yes, CVE-2018-11134 can potentially be exploited remotely if the attacker has access to the message queue system that manages privileged commands.

Vulnerability/
CVE-2018-11134

critical

CWE

640

31/5/2018

29/6/2018

CVE-2018-11134

First published: Thu May 31 2018(Updated: )

In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kace_support' account, which comes disabled by default but has full sudo privileges.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Quest KACE Systems Management Appliance	=8.0.318

Never miss a vulnerability like this again

Reference Links

https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2018-11134?
CVE-2018-11134 is considered a high severity vulnerability due to its potential to allow unauthorized users to change any user's password.
How do I fix CVE-2018-11134?
To fix CVE-2018-11134, update the Quest KACE System Management Appliance to a version later than 8.0.318 that addresses this vulnerability.
What are the implications of CVE-2018-11134?
The implications of CVE-2018-11134 include the risk of unauthorized access and privilege escalation to sensitive accounts, including the root account.
What versions of Quest KACE are affected by CVE-2018-11134?
CVE-2018-11134 specifically affects Quest KACE System Management Appliance version 8.0.318.
Can CVE-2018-11134 be exploited remotely?
Yes, CVE-2018-11134 can potentially be exploited remotely if the attacker has access to the message queue system that manages privileged commands.

agent/weakness
agent/references
agent/type
agent/event
agent/description
agent/severity
agent/author
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/quest
canonical/quest kace systems management appliance
version/quest kace systems management appliance/8.0.318

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.