What is GHSA-fm6r-8jgr-6mvw?

GHSA-fm6r-8jgr-6mvw is a security advisory published by GitHub Security Advisories with High severity. An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs...

Which CVE IDs does GHSA-fm6r-8jgr-6mvw cover?

GHSA-fm6r-8jgr-6mvw covers the following CVE IDs: CVE-2021-32087. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fm6r-8jgr-6mvw?

GHSA-fm6r-8jgr-6mvw has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-fm6r-8jgr-6mvwHighCVSS 8.8

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs...

Vendor

GitHub Security Advisories

Published

July 28, 2026

Last Modified

July 28, 2026

🔗 CVE IDs covered (1)

CVE-2021-32087 →

📋 Description

An issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service interface, which contains MySQL backups. Sensitive information is stored in the database, such as privileged credentials for other systems.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-32087
https://support.quest.com/download-product-select
https://support.quest.com/kace-systems-management-appliance/kb/4293505/quest-response-to-criticalstart-vulnerability-report
https://github.com/advisories/GHSA-fm6r-8jgr-6mvw