title: Race Condition
description:
A Race Condition exists in the Qualys Cloud Agent for Windows
platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to
escalate privileges limited on the local machine during uninstallation of the
Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on
that asset to run arbitrary commands.
At the time of this disclosure, versions before 4.0 are classified as End
of Life.
problem types: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
affected:
{
defaultStatus: unaffected
platforms: Windows
product: Cloud Agent
vendor: Qualys
versions:
lessThan: 4.5.3.1, status: affected, version:  3.1.3.34, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
exploits: Proof of Concept
solutions: Upgrade to version 4.5.3.1 of the Qualys Cloud Agent for Windows