CVE-2021-32086

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Deployment Appliance (SMA) version 11.0.273

Description The software uses a hardcoded symmetric encryption key to encrypt secrets within the MySQL databases. Because this key is not unique to each installation, an attacker with access to the MySQL server or backup files can decrypt these secrets. This may lead to privilege escalation within the system or provide privileged access to unrelated services and systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.