NetSight
critical9.8

CVE-2017-12567

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a S…

Impact

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.

Affected products

VendorProductAffected versions
QuestKace Asset Management Appliance
Versions 6.4.120822, 7.0, 7.0.121306, 7.1, 7.1.149, 7.2
QuestKace Systems Management Appliance
Versions 6.4.120822, 7.0, 7.0.121306, 7.1, 7.1.149, 7.2
QuestK1000 As A Service
Versions 7.0, 7.0.121306, 7.1, 7.1.149, 7.2

Weakness classification

References