CVE-2023-28143mediumCWE-426

CVE-2023-28143: fallo de gravedad media en Qualys Cloud Agent

Local Privilege Escalation

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cloud Agent

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.7epss 0.2%
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file permissions to give them ROOT command execution privileges on the host. During the install of the PKG, a step in the process involves extracting the package and copying files to several directories. Attackers may gain writable access to files during the install of PKG when extraction of the package and copying files to several directories, enabling a local escalation of privilege.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Qualys · Cloud Agent
CVEs relacionadas — Qualys Cloud Agent

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-28140MEDIUMExecutable HijackingEPSS 0.2%CVE-2023-28141MEDIUMNTFS JunctionEPSS 0.2%CVE-2023-28142MEDIUMRace ConditionEPSS 0.1%