CVE-2023-28142: Race Condition
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on that asset to run arbitrary commands.
At the time of this disclosure, versions before 4.0 are classified as End of Life.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-28142?
CVE-2023-28142 is a vulnerability that allows attackers to escalate privileges during the uninstallation of the Qualys Cloud Agent for Windows.
What is the severity of CVE-2023-28142?
CVE-2023-28142 has a severity rating of high.
How can attackers exploit CVE-2023-28142?
Attackers can exploit CVE-2023-28142 by gaining SYSTEM level privileges during the uninstallation of the Qualys Cloud Agent for Windows.
How can I fix CVE-2023-28142?
To fix CVE-2023-28142, update the Qualys Cloud Agent for Windows to version 4.5.3.1 or later.
Where can I find more information about CVE-2023-28142?
More information about CVE-2023-28142 can be found at the following link: [Qualys Security Advisories](https://www.qualys.com/security-advisories/)