Vulnerability Description
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on that asset to run arbitrary commands. At the time of this disclosure, versions before 4.0 are classified as End of Life.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qualys | Cloud Agent | >= 3.1.3.34, < 4.5.3.1 |
Related Weaknesses (CWE)
References
- https://www.qualys.com/security-advisories/Vendor Advisory
- https://www.qualys.com/security-advisories/Vendor Advisory
FAQ
What is CVE-2023-28142?
CVE-2023-28142 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during u...
How severe is CVE-2023-28142?
CVE-2023-28142 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28142?
Check the references section above for vendor advisories and patch information. Affected products include: Qualys Cloud Agent.