CVE-2023-28142

Name of the Vulnerable Software and Affected Versions Qualys Cloud Agent for Windows versions 3.1.3.34 through 4.5.3.1

Description A Race Condition exists in the Qualys Cloud Agent for Windows platform. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on that asset to run arbitrary commands. At the time of this disclosure, versions before 4.0 are classified as End of Life.

Recommendations For Qualys Cloud Agent for Windows versions 3.1.3.34 through 4.5.3.1, update to a version after 4.5.3.1 to resolve the issue. For versions before 4.0, consider upgrading to a supported version as they are classified as End of Life. As a temporary workaround, consider restricting the uninstallation of the Qualys Cloud Agent for Windows to minimize the risk of exploitation.