Lucene search
PRIOn knowledge basePRION:CVE-2018-11141HistoryMay 31, 2018 - 6:29 p.m.
Directory traversal
2018-05-3118:29:00
PRIOn knowledge base
www.prio-n.com
4
The ‘IMAGES_JSON’ and ‘attachments_to_remove[]’ parameters of the ‘/adminui/advisory.php’ script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to write and delete files respectively via Directory Traversal. Files can be at any location where the ‘www’ user has write permissions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kace_system_management_appliance | eq | 8.0.318 |
Related
nvd
nvd
CVE-2018-11141
2018-05-31 18:29:00
cve
cve
CVE-2018-11141
2018-05-31 18:29:00
cvelist
cvelist
CVE-2018-11141
2018-05-31 18:00:00
coresecurity
coresecurity
Quest KACE System Management Appliance Multiple Vulnerabilities
2018-05-31 00:00:00
packetstorm
packetstorm
zdt
zdt
Quest KACE System Management Appliance 8.0 - Multiple Vulnerabilities
2018-06-01 00:00:00