CVE-2022-38220

概要

参考情報

• support.quest.com/kb/339613 · Broken Link
• support.quest.com/kb/4368602/quest-response-to-kace-sma-vulnerability-cve-2022-38220 · Vendor Advisory

kace systems management appliance のその他の脆弱性

• CVE-2021-32088緊急 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to …
• CVE-2021-32087高 8.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp acco…
• CVE-2021-32086緊急 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a hardcoded symmetric encryption key to encrypt s…
• CVE-2021-32085高 8.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and…
• CVE-2021-32084緊急 9.8An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP a…