CVE-2018-11142

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

• CWE-863

• https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory
• https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilitiesExploit, Technical Description, Third Party Advisory

Published

May 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11137The 'checksum' parameter of the '/common/download_attachment…
• CVE-2018-11138The '/common/download_agent_installer.php' script in the Que…9.8
• CVE-2018-11139The '/common/ajax_email_connection_test.php' script in the Q…
• CVE-2018-1114It was found that URLResource.getLastModified() in Undertow …6.5
• CVE-2018-11140The 'reportID' parameter received by the '/common/run_report…
• CVE-2018-11141The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters o…
• CVE-2018-11143Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11144Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11145Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11146Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11147Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11148Quest DR Series Disk Backup software version before 4.0.3.1 …