CVE-2019-20504

Publication date

2020-03-09 00:55:30

Family

mitre

State

PUBLISHED

Description

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.