Vulnerability Details CVE-2021-44031
An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/{GUID}/{filename}.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2021-44031
-
cpe:2.3:a:quest:kace_desktop_authority:10.0
-
cpe:2.3:a:quest:kace_desktop_authority:10.1
-
cpe:2.3:a:quest:kace_desktop_authority:10.2
-
cpe:2.3:a:quest:kace_desktop_authority:11.0
-
cpe:2.3:a:quest:kace_desktop_authority:11.1