漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kace_support' account, which comes disabled by default but has full sudo privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Quest KACE System Management Appliance 安全漏洞
Vulnerability Description
Quest KACE System Management Appliance是美国Quest Software公司的一款IT资产管理设备。 Quest KACE System Management Appliance 8.0.318版本中存在安全漏洞。攻击者可利用该漏洞更改‘kace_support’账户密码。
CVSS Information
N/A
Vulnerability Type
N/A