An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.
History

Tue, 28 Jul 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Quest
Quest kace Systems Deployment Appliance
Vendors & Products Quest
Quest kace Systems Deployment Appliance

Mon, 27 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
Description An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. Certain API endpoints contain a rate-limiting feature to minimize a brute-force attack. This protection can be bypassed by removing the kboxid cookie.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-27T21:56:41.530Z

Reserved: 2021-05-06T00:00:00.000Z

Link: CVE-2021-32088

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-28T00:30:06Z