CVE-2018-11134: Critical severity Quest KACE System Management Appliance vulnerability
In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kacesupport' account, which comes disabled by default but has full sudo privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11134?
CVE-2018-11134 is considered a high severity vulnerability due to its potential to allow unauthorized users to change any user's password.
How do I fix CVE-2018-11134?
To fix CVE-2018-11134, update the Quest KACE System Management Appliance to a version later than 8.0.318 that addresses this vulnerability.
What are the implications of CVE-2018-11134?
The implications of CVE-2018-11134 include the risk of unauthorized access and privilege escalation to sensitive accounts, including the root account.
What versions of Quest KACE are affected by CVE-2018-11134?
CVE-2018-11134 specifically affects Quest KACE System Management Appliance version 8.0.318.
Can CVE-2018-11134 be exploited remotely?
Yes, CVE-2018-11134 can potentially be exploited remotely if the attacker has access to the message queue system that manages privileged commands.