Beveiligingsadvies

CVE-2021-32084

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-27 00:00:00

Laatst bijgewerkt 2026-07-28 14:55:09

Toegewezen door mitre

CVSS-score 9.8

Status PUBLISHED

Beschrijving

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API, leading to a potential compromise of the entire environment that is configured for KACE.

← Alle CVE's bekijken Bekijk op cve.org ↗