CVE-2023-28143mediumCWE-426

CVE-2023-28143: medium-severity vulnerability in Qualys Cloud Agent

Local Privilege Escalation

Published · Updated

Follow this CVE+ Monitor Cloud Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.2%
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file permissions to give them ROOT command execution privileges on the host. During the install of the PKG, a step in the process involves extracting the package and copying files to several directories. Attackers may gain writable access to files during the install of PKG when extraction of the package and copying files to several directories, enabling a local escalation of privilege.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Qualys · Cloud Agent
Related CVEs — Qualys Cloud Agent

In the same product, most dangerous first.

CVE-2023-28140MEDIUMExecutable HijackingEPSS 0.2%CVE-2023-28141MEDIUMNTFS JunctionEPSS 0.2%CVE-2023-28142MEDIUMRace ConditionEPSS 0.1%