CVE-2022-30285

Опубликовано: 02 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials.

Ссылки

https://support.quest.com/kace-systems-management-appliance/kb/338232/quest-response-to-kace-sma-vulnerabilities-cve-2022-30285
Vendor Advisory
https://www.quest.com/kace/
Vendor Advisory
https://support.quest.com/kace-systems-management-appliance/kb/338232/quest-response-to-kace-sma-vulnerabilities-cve-2022-30285
Vendor Advisory
https://www.quest.com/kace/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:quest:kace_systems_management_appliance:*:*:*:*:*:*:*:*

Версия до 12.1.168 (исключая)

EPSS

Процентиль: 50%

0.00267

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-326

Связанные уязвимости

GHSA-r39c-x95w-6gc8