CVE:CVE-2017-12567
CNNVD:CNNVD-201708-181
Quest KACE Systems Management Appliance是美国Quest Software公司的一款IT资产管理设备。
多个版本的Quest KACE Systems Management Appliance 6.4.120822至7.2版本中存在SQL注入漏洞。远程攻击者可利用该执行任意SQL命令。以下版本受到影响：Quest KACE Asset Management Appliance 6.4.120822至7.2版本；Systems Management Appliance 6.4.120822至7.2.101版本；K1000 as a Service 7.0至7.2版本。
solution:Upgrade quest kace_asset_management_appliance to a higher version than 6.4.120822,7.0,7.0.121306,7.1,7.1.149,7.2,and avoid the version 6.4.120822,7.0,7.0.121306,7.1,7.1.149,7.2; Upgrade quest kace_systems_management_appliance to a higher version than 6.4.120822,7.0,7.0.121306,7.1,7.1.149,7.2,7.2.101,and avoid the version 6.4.120822,7.0,7.0.121306,7.1,7.1.149,7.2,7.2.101; Upgrade quest k1000_as_a_service to a higher version than 7.0,7.0.121306,7.1,7.1.149,7.2,and avoid the version 7.0,7.0.121306,7.1,7.1.149,7.2