CVE-2021-32085: High severity Quest KACE Systems Deployment Appliance (SMA) vulnerability
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the MySQL databases. Sensitive information is stored in the database, such as privileged credentials for other systems.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the password for the report MySQL account from the publicly known value 'box747' to a unique strong password.
Quest KACE Systems Deployment Appliance (SMA) MySQL report account password = Change from box747 to a unique strong password - Configuration
Change the password for the R1 MySQL account from the publicly known value 'box747' to a unique strong password.
Quest KACE Systems Deployment Appliance (SMA) MySQL R1 account password = Change from box747 to a unique strong password
Event History
Frequently Asked Questions
What is the severity of CVE-2021-32085?
CVE-2021-32085 has a severity rating of high at 8.8 on the CVSS scale.
What vulnerability is associated with default user credentials in Quest KACE Systems Deployment Appliance?
CVE-2021-32085 highlights a critical issue where default user accounts are installed with the known password 'box747'.
How do I fix CVE-2021-32085?
To mitigate CVE-2021-32085, it is essential to change the default passwords for the report and R1 MySQL accounts immediately.
What impact does CVE-2021-32085 have on security?
CVE-2021-32085 allows remote attackers to gain privileged access easily, potentially compromising sensitive information.
Is there a workaround for CVE-2021-32085 until a fix is available?
The immediate workaround for CVE-2021-32085 is to disable or change the credentials for the default user accounts to enhance security.