Read the docs
TI-2023-12714 Aliases CVE-2023-28141GHSA-g3cj-qpc9-phm2

NTFS Junction

Priority LOW 29CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized files, allowing for the potential modification or deletion of sensitive files limited only to that specific directory/file object. This vulnerability is bounded to the time of installation/uninstallation and can only be exploited locally. At the time of this disclosure, versions before 4.0 are classified as End of Life.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00183 7th percentileScored 2026-11-07
Fix Fixed Cloud Agent (Qualys): 4.8.0.31

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualysCloud Agent3.1.3.34 to before 4.8.0.314.8.0.31Patch availableCNA
  • Cloud Agent VendorQualys Affected 3.1.3.34 to before 4.8.0.31 Fixed in 4.8.0.31 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*3.1.3.34 to before 4.8.0.31VulnerableQualys
  • cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:* Versions 3.1.3.34 to before 4.8.0.31 Vulnerable ·Qualys

Remediation

  • Fix · CNA Cloud Agent (Qualys) Fixed in 4.8.0.31

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-28141
  2. 2026-10-03 Alias added: GHSA-g3cj-qpc9-phm2

References

Advisory 1

  • TI-2023-12716 Local privilege escalation in Qualys Cloud Agent CVSS 3.1HIGH 7.0
  • TI-2023-12715 Race condition in Qualys Cloud Agent CVSS 3.1HIGH 7.0
  • TI-2023-12713 Executable Hijacking CVSS 3.1HIGH 7.0
  • TI-2022-12004 An issue was discovered in Qualys Cloud Agent 4.8.0-49. CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences