Logo
Retour à la veille

CVE-2021-32085

Publié : 27 juillet 2026
Modifié : 27 juillet 2026
Lien officiel NVD

Description détaillée

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the MySQL databases. Sensitive information is stored in the database, such as privileged credentials for other systems.

Références et Patchs

https://support.quest.com/download-product-selecthttps://support.quest.com/kace-systems-management-appliance/kb/4293505/quest-response-to-criticalstart-vulnerability-report

Dernières Vulnérabilités

CVE-2026-66473

Unauthenticated Broken Access Control in Xendit Payment <= 7.1.0 versions.

VOIR DÉTAILS

CVE-2026-65448

Unauthenticated Cross Site Scripting (XSS) in Anti Spam and list cleaner &#8211; AcyChecker <= 1.8.1 versions.

VOIR DÉTAILS

CVE-2026-65447

Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.

VOIR DÉTAILS