-
标题
Security Vulnerability Patch (SEC2019_20190627) -
说明
A hotfix has been created to address a potential security vulnerability. This hotfix applies to SMA versions: 8.0, 8.1, 9.0, and 9.1.
You may download the hotfix and install it immediately, or wait for update distribution via the advertised appliance upgrade process. We encourage everyone to upgrade at your earliest convenience.
After the hotfix is applied or the appliance is updated via the appliance upgrade distribution process, the following versions will contain the fix for the potential security vulnerability:
8.0.321
8.1.109
9.0.271
9.1.318 or laterIf you are running a version older than 8.0, it is highly recommend that you upgrade to 8.0.321 (hot fixed version) at a minimum.
Q. What is the security vulnerability?
A. We found areas of the code where privilege escalation and remote code execution might occur.Q. What areas of the product does this vulnerability affect?
A. Provisioning, Service Desk Email, Error handling, Settings, Reporting, KB Articles.Q. Do I need to upgrade to the latest version of the product?
A. We recommend at the very minimum that customers apply the hotfix (version 8.0.321 at a minimum). All subsequent version upgrades (from 8.1) will contain the security vulnerability fix.Q. How can I confirm that my appliance is at risk?
A. If you are on one of the affected versions (8.0, 8.1, 9.0, and 9.1 that are less than those listed in the post hotfix versioning) you may be at risk. However, we are not aware of any of these vulnerabilities being exploited to date.Q. How can I be sure my appliance is no longer susceptible to this security vulnerability?
A. Please ensure that your current product version is one of those including the fix for the security vulnerability. These versions have been published. You can verify your version by going to Need Help? and clicking on the (i) tab.Q. Will this affect me if my appliance isn’t externally accessible from the internet?
A. To avoid any potential risk, we recommend applying the fix to all affected appliances.Q. Will this patch affect any other functionality?
A. No.Q. What if I am on an older version?
A. Any version before 9.0 is no longer supported. We recommend you upgrade to a supported version. Please refer to the Software Product Lifecycle for additional information:https://support.quest.com/k1000-systems-management-appliance/lifecycle
Q. Do these vulnerabilities affect the KACE Agent installed on my endpoints?
A. No -
解决办法
Click Here to download the patch
NOTE: Applying the hotfix will NOT force a reboot on the SMA (K1000).
To apply the security hotfix:- Download the attachment referenced in the link above: k1_hotfix_SEC2019_20190627.kbin
- Go to Settings | Appliance Updates
- Use the Choose File in the Manually Update section and navigate to the file downloaded in step 1
- Click Update
To confirm that the process completed as expected, please view Settings | Logs and change the drop-down to Updates. The logs should state that the security hotfix was applied.
If you are running a version older than 8.0, it is highly recommend that you upgrade to 8.0.321 (hot fixed version) at a minimum.
Please see this article for the SMA upgrade path and the minimal agent versions.
After the hotfix is applied or the appliance is updated via the appliance upgrade distribution process, the following versions will contain the fix for the potential security vulnerability:
8.0.321
8.1.109
9.0.271
9.1.318 or later