Critical Authentication Bypass Vulnerability in Quest KACE Systems Management Appliance

What changed

Quest has disclosed a significant vulnerability affecting the KACE Systems Management Appliance (SMA) that allows attackers to bypass authentication mechanisms. This flaw can enable unauthorized users to impersonate legitimate administrators, posing a serious security risk.

The vulnerability is present in the SSO authentication handling mechanism and affects several versions of the product, making it critical for users to assess their current deployments.

Who is affected

Organizations using the Quest KACE Systems Management Appliance (SMA) are at risk, particularly those running the following versions:

Versions 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 (Patch 5), and 14.1.x before 14.1.101 (Patch 4) are vulnerable.

• Quest KACE Systems Management Appliance (SMA) users
• IT departments relying on KACE for systems management
• Organizations with sensitive data managed through KACE
• Any enterprise utilizing SSO authentication mechanisms in KACE

What to do

It is imperative for affected organizations to take immediate action to mitigate the risks associated with this vulnerability. Users should upgrade to the latest patched versions of the KACE SMA as soon as possible.

Additionally, organizations should review their authentication configurations and monitor for any unauthorized access attempts.

• Upgrade to KACE SMA versions 13.0.385, 13.1.81, 13.2.183, 14.0.341 (Patch 5), or 14.1.101 (Patch 4) or later.
• Conduct a security audit of current KACE deployments.
• Implement additional monitoring to detect suspicious activities.
• Educate staff on the importance of secure authentication practices.