CVE-2018-11142: Medium severity Quest KACE System Management Appliance vulnerability
The 'systemui/settingsnetwork.php' and 'systemui/settingspatching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'XForwardedFor' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11142?
CVE-2018-11142 is considered a high severity vulnerability due to its potential for unauthorized access through header modification.
How can CVE-2018-11142 be exploited?
An attacker can exploit CVE-2018-11142 by altering the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request to access restricted scripts.
What systems are affected by CVE-2018-11142?
CVE-2018-11142 affects Quest KACE System Management Appliance version 8.0.318.
How do I mitigate CVE-2018-11142?
To mitigate CVE-2018-11142, ensure access controls are enforced and avoid reliance on headers that can be manipulated.
Is there a patch available for CVE-2018-11142?
Yes, updating to a later version of the Quest KACE System Management Appliance will typically address CVE-2018-11142.