virus logo FortiClient Vulnerability

KACE System Management Appliance CVE-2018-11138 Command Injection Vulnerability

description-logoDescription

The \'/common/download_agent_installer.php\' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

affected-products-logoAffected Applications

KACE System Management Appliance

CVE References

CVE-2018-11138

Other References

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11138
ID 4337
Created Mar 30, 2022
Description
Updated		 Oct 26, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Quest Software Inc
Patch manual
Application KACE System Management Appliance