Authentication flaw

2022-08-0222:15:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials.

CPENameOperatorVersion
kace_systems_management_appliancelt12.1.168

CPE	Name	Operator	Version
	kace_systems_management_appliance	lt	12.1.168

References

support.quest.com/kace-systems-management-appliance/kb/338232/quest-response-to-kace-sma-vulnerabilities-cve-2022-30285

www.quest.com/kace/