CVE-2018-11142

MEDIUM

Quest KACE System Management Appliance 8.0.318 - Unauthenticated Incorrect Authorization via Host Header Bypass

Title source: llm
STIX 2.1

Description

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

References (1)

Core 1
Core References
Exploit, Technical Description, Third Party Advisory x_refsource_misc
https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities

Scores

CVSS v3 5.5
EPSS 0.0042
EPSS Percentile 34.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-863
Status published
Products (1)
quest/kace_system_management_appliance 8.0.318
Published May 31, 2018
Tracked Since Feb 18, 2026