CVE-2018-11135

The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2018-05-31

Last modified

2024-08-05

Weaknesses

CWE-1321

Affected products

• Kace System Management Appliance (Quest)

References

• https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities