Security ID : QSA-24-50

Vulnerability in License Center

Release date : December 7, 2024
CVE identifier : CVE-2024-48863
Affected products: License Center 1.9.x

Severity

Important

Status

Resolved

Summary

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands.

We have already fixed the vulnerability in the following version:

Affected Product	Fixed Version
License Center 1.9.x	License Center 1.9.43 and later

Recommendation

To fix the vulnerability, we recommend updating License Center to the latest version.

Updating License Center

Log on to QTS or QuTS hero as an administrator.
Open App Center and then click .
A search box appears.
Type "License Center" and then press ENTER.
License Center appears in the search results.
Click Update.
A confirmation message appears.
Note: The Update button is not available if your License Center is already up to date.
Click OK.
The application is updated.