Read the docs
TI-2018-03934 Aliases CVE-2018-5406GHSA-w47r-hmfw-c2px

The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.

Priority MEDIUM 52CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.

Summary

The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows a remote attacker to exploit the misconfigured Cross-Origin Resource Sharing (CORS) mechanism. An unauthenticated, remote attacker could exploit this vulnerability to perform sensitive actions such as adding a new administrator account or changing the appliance’s settings. A malicious internal user could also gain administrator privileges of this appliance and use it to visit a malicious link that exploits this vulnerability. This could cause the application to perform sensitive actions such as adding a new administrator account or changing the appliance’s settings. An unauthenticated, remote attacker could add an administrator-level account or change the appliance's settings.

Why it matters now

EPSS 0.12206 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed K1000 Appliance (Quest Kace): 9.0.270

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
QuestK1000 Appliance9.0.270 to before 9.0.2709.0.270Patch availableCNA
  • K1000 Appliance VendorQuest Affected 9.0.270 to before 9.0.270 Fixed in 9.0.270 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:quest:kace_systems_management_appliance_firmware:*:*:*:*:*:*:*:*before 9.0.270VulnerableQuest
cpe:2.3:h:quest:kace_systems_management_appliance:-:*:*:*:*:*:*:*not specified by NVDRunning onQuest
  • cpe:2.3:o:quest:kace_systems_management_appliance_firmware:*:*:*:*:*:*:*:* Versions before 9.0.270 Vulnerable ·Quest
  • cpe:2.3:h:quest:kace_systems_management_appliance:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Quest

Remediation

  • Fix · CNA K1000 Appliance (Quest Kace) Fixed in 9.0.270

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Quest Kace K1000 Appliance 9.0.270

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2018-03932 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.Priority LOW 35
    • TI-2018-03933 The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.Priority LOW 31
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-5406
  2. 2026-10-03 Alias added: GHSA-w47r-hmfw-c2px

References

Exploit 1

Advisory 2

  • TI-2018-03932 The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections. CVSS 3.0MEDIUM 6.5
  • TI-2018-03933 The Quest Kace K1000 Appliance is vulnerable to JavaScript injection. CVSS 3.0MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences