Threats tagged 'ghsa-m359-p2w2-2pxh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2025-32976Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183 High8.82025-06-26GCVE DatabaseCVE-2025-32976 Quest KACE Systems Management Appliance (SMA) versions prior to 13.0.385, 13.1.81, 13.2.183, 14.0.341 (Patch 5), and 14.1.101 (Patch 4) contain a logic flaw in their two-factor authentication (2FA) implementation. This flaw allows authenticated users to bypass the Time-based One-Time Password (TOTP) 2FA requirement, potentially enabling unauthorized elevated access. Report on CVE-2025-32976 Vulnerability CWE-288 #ghsa-m359-p2w2-2pxh	GCVE Database	2025-06-26

Page 1 of 1