Hash Collision in Quest KACE SMA 12.0 Auth Allow Bad Login
CVE-2022-30285 Published on August 2, 2022
In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials.
Products Associated with CVE-2022-30285
Want to know whenever a new CVE is published for Quest Software Kace Systems Management Appliance? stack.watch will email you.
Exploit Probability
EPSS
0.27%
Percentile
49.85%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.