CPE Details
Qualys Cloud Agent 2.5.1-75 for MacOS
2.5.1-75
2023-04-25
15h30 +00:00
15h30 +00:00
2023-08-11
21h44 +00:00
21h44 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:qualys:cloud_agent:2.5.1-75:*:*:*:*:macos:*:*
Informations
Vendor
qualysProduct
cloud_agentVersion
2.5.1-75Target Software
macosRelated CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file permissions to give them ROOT command execution privileges on the host. During the install of the PKG, a step in the process involves extracting the package and copying files to several directories. Attackers may gain writable access to files during the install of PKG when extraction of the package and copying files to several directories, enabling a local escalation of privilege. | 7 |
High |
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.