Description
An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.
Published:
2026-07-27
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Tue, 28 Jul 2026 00:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Quest
Quest kace Systems Deployment Appliance |
|
| Vendors & Products |
Quest
Quest kace Systems Deployment Appliance |
Mon, 27 Jul 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-07-27T21:56:41.530Z
Reserved: 2021-05-06T00:00:00.000Z
Link: CVE-2021-32088
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-07-28T00:30:06Z
Weaknesses
No weakness.