CVE-2022-38220

Description

References

• support.quest.com/kb/339613 · Broken Link
• support.quest.com/kb/4368602/quest-response-to-kace-sma-vulnerability-cve-2022-38220 · Vendor Advisory

Altre vulnerabilità di kace systems management appliance

• CVE-2021-32088CRITICO 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to …
• CVE-2021-32087ALTO 8.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp acco…
• CVE-2021-32086CRITICO 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt s…
• CVE-2021-32085ALTO 8.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and…
• CVE-2021-32084CRITICO 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP a…