CVE-2021-32087

Name of the Vulnerable Software and Affected Versions Quest KACE Systems Deployment Appliance (SMA) version 11.0.273

Description The software installs with default user credentials. Specifically, the kbftp account uses a publicly known password getbxf. This allows remote attackers to gain privileged access to the FTP service interface, which stores MySQL backups containing sensitive information, including privileged credentials for other systems.

Recommendations Change the default password for the kbftp account on version 11.0.273.