Products
Quest KACE Agent for Windows
- 12.0.38
- 13.1.23.0
Source
cve@mitre.org
Tags
CVE-2024-23773 details
Published : April 30, 2024, 2:15 p.m.
Last Modified : April 30, 2024, 5:52 p.m.
Last Modified : April 30, 2024, 5:52 p.m.
Description
An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability exists in the KSchedulerSvc.exe component. Local attackers can delete any file of their choice with NT Authority\SYSTEM privileges.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://support.quest.com/kb/4375402/quest-response-to-kace-sma-agent-vulnerabilities-cve-2024-23772-cve-2024-23773-cve-2024-23774 | cve@mitre.org |
| https://www.quest.com/kace/ | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.