CVE-2023-28142CWE-362

Race Condition

Medium · published April 18, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

A Race Condition exists in the Qualys Cloud Agent for Windows

platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to

escalate privileges limited on the local machine during uninstallation of the

Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on

that asset to run arbitrary commands.

At the time of this disclosure, versions before 4.0 are classified as End

of Life.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2023-04-18T15:51Z
EPSS history
Timeline
  • 18 APR 15:51Z
    Race Condition
    cvelistv5