mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 18:52:12 +00:00
18 lines
1.0 KiB
Markdown
18 lines
1.0 KiB
Markdown
|
### [CVE-2023-28142](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28142)
|
||
|
|
|
||
|
|
|
||
|
|
&color=brighgreen)
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
A Race Condition exists in the Qualys Cloud Agent for Windowsplatform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers toescalate privileges limited on the local machine during uninstallation of theQualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges onthat asset to run arbitrary commands.At the time of this disclosure, versions before 4.0 are classified as Endof Life.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://www.qualys.com/security-advisories/
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
No PoCs found on GitHub currently.
|
||
|
|
|