CVE-2021-32086: Critical severity Quest KACE Systems Deployment Appliance (SMA) vulnerability
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt secrets in the MySQL databases. (This key is not unique for each installation.) An attacker that gains access to the MySQL server or a backup files can decrypt the secrets. Often, the decrypted secrets can be used to escalate privileges within KACE, or gain privileged access to unrelated systems or services.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Quest KACE Systems Deployment Appliance (SMA)to a version that resolves this vulnerability.Fixed in 11.0.273 - Compensating control
Assume secrets stored in the MySQL databases (encrypted with a hardcoded symmetric key) may be decrypted if an attacker gains access to the MySQL server or backup files; restrict access to the MySQL server and backup files to trusted users/hosts (e.g., via network isolation and tight ACL/firewall rules).
Event History
Frequently Asked Questions
What is the severity of CVE-2021-32086?
CVE-2021-32086 has a critical severity rating of 9.8 on the CVSS scale.
How can I mitigate the risk of CVE-2021-32086?
To mitigate CVE-2021-32086, ensure that your KACE Systems Deployment Appliance is updated to the latest version where the vulnerability has been addressed.
What impact does CVE-2021-32086 have on my system?
CVE-2021-32086 allows attackers with MySQL server access to decrypt sensitive data due to a hardcoded encryption key.
Is CVE-2021-32086 present in all versions of Quest KACE Systems Deployment Appliance?
CVE-2021-32086 has been identified in Quest KACE Systems Deployment Appliance version 11.0.273.
What are the potential consequences of exploiting CVE-2021-32086?
Exploiting CVE-2021-32086 could lead to unauthorized access to sensitive information stored in the MySQL database.