CVE-2021-44031

2021-12-2205:08:18

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.1%

JSON

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID}/{filename}.