Security Advisory

CVE-2019-20504

9.8
CRITICAL

Vulnerability Description

service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.
Published Date March 9, 2020
Official Source NIST NVD Advisory