Read the docs
TI-2023-12715 Aliases CVE-2023-28142GHSA-7m47-393h-xm3q

Race condition in Qualys Cloud Agent

Priority LOW 32CWE-362Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on that asset to run arbitrary commands. At the time of this disclosure, versions before 4.0 are classified as End of Life.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00131 2nd percentileScored 2026-11-07
Fix Fixed Cloud Agent (Qualys): 4.5.3.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QualysCloud Agent 3.1.3.34 to before 4.5.3.14.5.3.1Patch availableCNA
  • Cloud Agent VendorQualys Affected 3.1.3.34 to before 4.5.3.1 Fixed in 4.5.3.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:*3.1.3.34 to before 4.5.3.1VulnerableQualys
  • cpe:2.3:a:qualys:cloud_agent:*:*:*:*:*:windows:*:* Versions 3.1.3.34 to before 4.5.3.1 Vulnerable ·Qualys

Remediation

  • Fix · CNA Cloud Agent (Qualys) Fixed in 4.5.3.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Qualys Cloud Agent 4.5.3.1

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-28142
  2. 2026-10-03 Alias added: GHSA-7m47-393h-xm3q

References

Advisory 1

  • TI-2023-12716 Local privilege escalation in Qualys Cloud Agent CVSS 3.1HIGH 7.0
  • TI-2023-12713 Executable Hijacking CVSS 3.1HIGH 7.0
  • TI-2023-12714 NTFS Junction CVSS 3.1MEDIUM 6.7
  • TI-2022-12004 An issue was discovered in Qualys Cloud Agent 4.8.0-49. CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences