CVE-2018-11137

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: May 31, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-111389.8The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and CVE-2018-111398.8The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated CVE-2018-11146.5It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file de CVE-2018-111409.8The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not saniti CVE-2018-111419.8The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual CVE-2018-111425.5The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are a CVE-2018-111439.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).CVE-2018-111448.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).CVE-2018-111458.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).CVE-2018-111468.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).CVE-2018-111478.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).CVE-2018-111488.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).