Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) allows unauthenticated users to replace system licenses through a web interface intended for license renewal. Attackers can exploit this to replace valid licenses with expired or trial licenses, causing denial of service.
References
Configurations
No configuration.
History
26 Jun 2025, 18:58
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-24 15:15
Updated : 2025-06-26 18:58
NVD link : CVE-2025-32978
Mitre link : CVE-2025-32978
CVE.ORG link : CVE-2025-32978
JSON object : View
Products Affected
No product.
CWE
CWE-306
Missing Authentication for Critical Function