CVE-2018-11134

This issue is like having a locked “back door” account on a server. The back door account is normally disabled, but the problem lets someone with a small amount of access change that back door’s password. Once they do, they can log in as an administrator and take over the appliance.

This matters if you use or operate a Quest KACE System Management Appliance, especially if it’s running version 8.0.318. The risk is specifically tied to an attacker having a low-privilege account on the device.

It’s a concern when the appliance is reachable in its default configuration and an attacker can authenticate with a low-privilege account; there’s no need for the attacker to trick a user into clicking anything.

Treat this as urgent (Amber) because the weakness can turn a low-privilege login into full administrative control of the appliance, with network reachability in default configurations. Public exploit code exists, and the exploitation risk is trending upward.

There is no confirmed patch/version provided in the available information, so your immediate focus should be containment (reduce exposure) and guidance from Quest for a mitigation or update.