CVE-2017-12567

Critical

Published: 07/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability exists in Quest KACE Asset Management Appliance versions 6.4.120822 through 7.2 and Systems Management Appliance versions 6.4.120822 through 7.2.101.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to database information, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest software version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.