CVE-2018-5404
The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.
- State
- Published
- Severity
- Not scored
- Published
- Jun 3, 2019
- Updated
- Aug 5, 2024
- Reserved
- Jan 12, 2018
Description
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated, remote attacker with least privileges ('User Console Only' role) to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information from the database or copy the entire database. An authenticated remote attacker could leverage Blind SQL injections to obtain sensitive data.
Scores
The record has no CVSS score.
Weaknesses
- CWE-89 SQL Injection
Affected Products
| Product | Versions |
|---|---|
K1000 ApplianceQuest Kace |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.