Approved changes feed: RSS · Atom

cpe:2.3:a:quest:foglight_evolve:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuest (91a9bf17-30f5-5671-ad35-2f5777bc4995)
ProductFoglight Evolve (d8a5a84a-44aa-5294-afd5-cb031e2c6845)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8868 vulnerable 2026-06-08 05:27:19.877537 Details available
CRITICAL (9.8)
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the __service__ user account. The product contains a hard-coded password for this account. An attacker can leverage this vulnerability to execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-9553.
Published: 2020-03-23T20:15:18.000Z
Updated: 2024-08-04T10:12:10.979Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.