CVE-2021-44031

CRITICAL 9.8CVE-2021-44031 · Published 22/12/2021 · updated 17/06/2026

In short

CVE-2021-44031 is a CRITICAL (CVSS 9.8) vulnerability affecting kace desktop authority (quest).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.3% of all vulnerabilities.
Fix: update to 11.2 or later.

Package	Affected versions	Patched versions
kace desktop authority quest	`< 11.2`	`11.2`

Description

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID}/{filename}.

References

support.quest.com/kace-desktop-authority/kb/336098/quest-response-to-desktop-authority-vulnerabilities-prior-to-11-2 · Vendor Advisory

More vulnerabilities in kace desktop authority

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

kace desktop authority

quest

< 11.2

11.2

More vulnerabilities in kace desktop authority

See all →