| Package | Affected versions | Patched versions |
|---|---|---|
| kace desktop authority | < 11.2 | 11.2 |
An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID}/{filename}.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free