CVE-2021-44028 : Security Advisory and Response

Quest KACE Desktop Authority before version 11.2 is prone to an XML External Entity (XXE) vulnerability due to potential control over the log4net configuration file by an attacker.

Understanding CVE-2021-44028

This CVE details the XXE vulnerability in Quest KACE Desktop Authority before version 11.2.

What is CVE-2021-44028?

CVE-2021-44028 describes the susceptibility of Quest KACE Desktop Authority to XXE attacks, allowing threat actors to manipulate the log4net configuration file.

The Impact of CVE-2021-44028

The vulnerability could lead to unauthorized access, data leakage, and potentially full system compromise in affected versions of Quest KACE Desktop Authority.

Technical Details of CVE-2021-44028

The technical specifics of the vulnerability are as follows:

Vulnerability Description

XXE vulnerability in Quest KACE Desktop Authority before 11.2

Affected Systems and Versions

Quest KACE Desktop Authority versions prior to 11.2

Exploitation Mechanism

Attackers exploit the vulnerability by controlling the log4net configuration file.

Mitigation and Prevention

Steps to address and mitigate the issue include:

Immediate Steps to Take

Upgrade Quest KACE Desktop Authority to version 11.2 or above.
Apply vendor-provided patches and security updates.

Long-Term Security Practices

Implement proper input validation to prevent XXE vulnerabilities.
Regularly monitor and audit log4net configuration files for unauthorized changes.

Patching and Updates

Regularly check for security advisories and updates from Quest to stay protected.