CVE-2021-44028: XEE
Published Dec 22, 2021
·Updated
XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.
Affected Software
1 affected component
Quest KACE Desktop Authority>=10.0<11.2
Event History
Dec 22, 2021
CVE Published
via MITRE·05:03 AM
Data Sourced
via MITRE·05:03 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-44028?
CVE-2021-44028 is a vulnerability that allows for XXE (XML External Entity) attacks in Quest KACE Desktop Authority before version 11.2.
2
How can XXE occur in Quest KACE Desktop Authority?
XXE can occur in Quest KACE Desktop Authority before version 11.2 because the log4net configuration file might be controlled by an attacker.
3
Is CVE-2021-44028 related to CVE-2018-1285?
Yes, CVE-2021-44028 is a related issue to CVE-2018-1285.
4
What is the severity of CVE-2021-44028?
CVE-2021-44028 has a severity rating of medium.
5
How do I fix CVE-2021-44028?
To fix CVE-2021-44028, update Quest KACE Desktop Authority to version 11.2 or later.