Quest response to KACE SMA Vulnerabilities: CVE-2022-29808 (4258795)

Chat now with support

Zurück

Feedback übermittelt

Konnten Sie mithilfe dieses Artikels ein Problem lösen?

Bewertung auswählen

Titel

Quest response to KACE SMA Vulnerabilities: CVE-2022-29808
Beschreibung

The Quest team has been made aware regarding vulnerabilities involving the KACE System Management Appliance product below:
CVE-2022-29808 - Incorrect Access Control

Quest takes handling of vulnerabilities seriously, and we investigate and respond to all reported potential vulnerabilities. Our vulnerability reporting and response process can be found here.
Ursache

CVE-2022-29808 - In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.
Lösung

The KACE SMA vulnerability reported under CVE-2022-29808 is resolved in version 12.1.168 of the KACE Systems Management Appliance, available for download here.
If unable to upgrade to the latest version at this time, please refer to KACE SMA April 2022 Critical Security Hotfix.

Feedback übermittelt

Konnten Sie mithilfe dieses Artikels ein Problem lösen?

Bewertung auswählen

Empfohlener Inhalt

Produkt(e):: KACE Asset Management Appliance; KACE Service Desk; KACE Systems Management Appliance; KACE as a Service

Titel