critical9.8
CVE-2021-32088
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273.
Impact
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quest | Kace Systems Management Appliance | Version 11.0.273 |