Quest takes handling of vulnerabilities seriously, and we investigate and respond to all reported potential vulnerabilities. Our vulnerability reporting and response process can be found here.
原因
CVE-2022-29808 - In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled.
解决办法
The KACE SMA vulnerability reported under CVE-2022-29808 is resolved in version 12.1.168 of the KACE Systems Management Appliance, available for download here.