published December 22, 2021
⚠️ A sneaky deserialization issue lurks in Quest KACE Desktop Authority! An attacker can execute remote code if they know the encryption keys, thanks to some other vulnerabilities hanging around. 🔥 Think of it like a restaurant where the chef is willing to prepare anything on the menu, but only if you provide the secret ingredient. If the attacker knows the ingredient (the encryption keys), they can customize their order to include malicious code! An attacker could exploit this vulnerability to run arbitrary code on the server, gaining unauthorized access and control over the system. This could lead to data theft, unauthorized changes, or even a full takeover of the affected server, all while appearing as a legitimate request. Absolutely devastating!
Think of it like a restaurant where the chef is willing to prepare anything on the menu, but only if you provide the secret ingredient. If the attacker knows the ingredient (the encryption keys), they can customize their order to include malicious code! This vulnerability in Quest KACE Desktop Authority arises from improper deserialization in the RadAsyncUpload function of ASP.NET AJAX. If an attacker knows the necessary encryption keys, they can manipulate the deserialization process to inject and execute malicious code.
An attacker could exploit this vulnerability to run arbitrary code on the server, gaining unauthorized access and control over the system. This could lead to data theft, unauthorized changes, or even a full takeover of the affected server, all while appearing as a legitimate request. Absolutely devastating! To protect against this vulnerability, upgrade to Quest KACE Desktop Authority version 11.2 or higher, where a default setting for type whitelisting mitigates this risk. Additionally, ensure that no known exploitation paths, like CVE-2017-11317 and CVE-2017-11357, are left unaddressed. Review your security policies to prevent unauthorized access to encryption keys. You've got this! Follow these steps, and you'll lock down your systems in no time! 🛡️