VulnerabilityModified
CVE-2018-11137
The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal.
MEDIUM 6.5EPSS 6.48%
Does this matter?
Lower severity and a low EPSS score (6.48%). Track it; it rarely justifies an emergency change on its own.
Description
The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 6.48% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- quest/kace system management appliance
- Source
- cve@mitre.org
References
- https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory
- https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.