CVE-2018-11138

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Aug 13, 2026

Description

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2018
Last modified
Aug 13, 2026
Added to CISA KEV
Mar 25, 2022
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-111398.8The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticatedCVE-2018-11146.5It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file deCVE-2018-111409.8The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitiCVE-2018-111419.8The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management VirtualCVE-2018-111425.5The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are aCVE-2018-111439.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).CVE-2018-111448.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46).CVE-2018-111458.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46).CVE-2018-111468.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46).CVE-2018-111478.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46).CVE-2018-111488.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46).CVE-2018-111498.8Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).