CVE-2023-28141mediumCWE-59

CVE-2023-28141: falha de média gravidade em Qualys Cloud Agent

NTFS Junction

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cloud Agent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.7epss 0.2%
An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized files, allowing for the potential modification or deletion of sensitive files limited only to that specific directory/file object. This vulnerability is bounded to the time of installation/uninstallation and can only be exploited locally. At the time of this disclosure, versions before 4.0 are classified as End of Life.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Qualys · Cloud Agent
CVEs relacionadas — Qualys Cloud Agent

No mesmo produto, das mais perigosas para as menos.

CVE-2023-28140MEDIUMExecutable HijackingEPSS 0.2%CVE-2023-28143MEDIUMLocal Privilege EscalationEPSS 0.2%CVE-2023-28142MEDIUMRace ConditionEPSS 0.1%