Lucene search

QualysCVE-2023-28141

HistoryApr 18, 2023 - 4:15 p.m.

CVE-2023-28141

2023-04-1816:15:09

CWE-59

Qualys

web.nvd.nist.gov

cve-2023-28141

ntfs junction

qualys cloud agent

windows

security vulnerability

local attack vector

eol

nvd

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

High

EPSS

Percentile

9.0%

JSON

An NTFS Junction condition exists in the Qualys Cloud Agent
for Windows platform in versions before 4.8.0.31. Attackers may write files to
arbitrary locations via a local attack vector. This allows attackers to assume
the privileges of the process, and they may delete or otherwise on unauthorized
files, allowing for the potential modification or deletion of sensitive files
limited only to that specific directory/file object. This vulnerability is
bounded to the time of installation/uninstallation and can only be exploited locally.

At the time of this disclosure, versions before 4.0 are
classified as End of Life.

Affected configurations

Nvd

Node

qualyscloud_agentRange3.1.3.34–4.8.0.31windows

VendorProductVersionCPE
qualyscloud_agent*cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
qualys	cloud_agent	*	cpe:2.3:a:qualys:cloud_agent::::::windows::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Cloud Agent",
    "vendor": "Qualys",
    "versions": [
      {
        "lessThan": "4.8.0.31",
        "status": "affected",
        "version": "3.1.3.34",
        "versionType": "custom"
      }
    ]
  }
]

References

www.qualys.com/security-advisories/

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-28141