writeups.xyz / QUEST KACE Desktop Authority Pre-Auth Remote Code Execution (CVE-2021-44031)

Submitter : c2a

Date: 8 September 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal

Programs :

• Quest

Authors :

• Tom Ellson (@Tde_sec)

Link :
https://labs.jumpsec.com/quest-kace-desktop-authority-pre-auth-remote-code-execution-cve-2021-44031/