CVE-2018-11137

MEDIUM

Quest KACE System Management Appliance 8.0.318 - Unauthenticated Path Traversal via checksum Parameter

Title source: llm
STIX 2.1

Description

The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.

References (1)

Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities

Scores

CVSS v3 6.5
EPSS 0.0648
EPSS Percentile 92.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-22
Status published
Products (1)
quest/kace_system_management_appliance 8.0.318
Published May 31, 2018
Tracked Since Feb 18, 2026