cve/2023/CVE-2023-28142.md
2024-06-18 02:51:15 +02:00

1.0 KiB

CVE-2023-28142

Description

A Race Condition exists in the Qualys Cloud Agent for Windowsplatform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers toescalate privileges limited on the local machine during uninstallation of theQualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges onthat asset to run arbitrary commands.At the time of this disclosure, versions before 4.0 are classified as Endof Life.

POC

Reference

Github

No PoCs found on GitHub currently.