Critical Authentication Bypass Vulnerability in Quest KACE Systems Management Appliance

What changed

The Quest KACE Systems Management Appliance (SMA) has been found to have an improper authentication vulnerability that affects multiple versions of the software. This flaw enables attackers to impersonate legitimate users, gaining unauthorized access to administrative functions.

The vulnerability primarily resides in the Single Sign-On (SSO) authentication mechanism, which, if exploited, can result in a complete administrative takeover of the affected systems.

Who is affected

Organizations utilizing the Quest KACE Systems Management Appliance should be aware of the potential risks associated with this vulnerability. Several versions of the product are impacted, making it crucial for users to assess their systems.

The following versions are affected: 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4).

• Quest KACE Systems Management Appliance (SMA) versions 13.0.x, 13.1.x, 13.2.x, 14.0.x, and 14.1.x.
• Organizations that rely on KACE SMA for systems management.
• IT departments managing network security and user access controls.
• Any enterprise utilizing SSO authentication within their systems.

What to do

Users of the affected versions are strongly advised to update their systems to the latest patches provided by Quest. This will mitigate the risk associated with the authentication bypass vulnerability.

Additionally, organizations should conduct a thorough review of their security protocols and access controls to ensure that no unauthorized access has occurred.

• Update to the latest version of KACE SMA as per vendor recommendations.
• Review and enhance access control measures within the organization.
• Monitor systems for any signs of unauthorized access or anomalies.
• Educate staff about the importance of security practices, especially regarding authentication.