CVE-2018-11142 Auth bypass in n/a

Medium 5.5 Published 31 May 2018 Updated 5 Aug 2024

An anonymous attacker can bypass localhost restrictions via HTTP headers to execute critical functions on the KACE appliance.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-11142?

CVE-2018-11142 is a medium-severity authentication bypass vulnerability in n/a, published on 31 May 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization.

Weakness: CWE-863

Which versions are affected by CVE-2018-11142?

It affects 1 product.

Products include Quest Kace System Management Appliance.

How do I fix CVE-2018-11142?

No fix has been published for CVE-2018-11142 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-11142 being exploited?

There is no known exploitation of CVE-2018-11142 in the wild and no public exploit code.

Sources

Also known as GHSA-2qcm-cv9r-3v6h.