{"cvss":0.0,"datePublished":"2024-06-29T00:00:00Z","dateUpdated":"2024-06-29T00:00:00Z","description":"service/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822) allows a remote attacker to execute code via shell metacharacters in the kuid parameter.","dueDate":"","id":"CVE-2019-20504","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"kace_systems_management","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Quest kace_systems_management Improper Neutralization of Special Elements used in an OS Command","vendor":"Quest"}