Published on: Not Yet Published
Last Modified on: 09/15/2022 04:49:00 PM UTC
An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks (e.g., to help ensure that a program was installed by root) and without integrity checks (e.g., a checksum comparison against known legitimate programs). Also, the vendor recommendation is to install this agent software with root privileges. Thus, privilege escalation is possible on systems where any of these pathnames is controlled by a non-root user. An example is /opt/firebird/bin/isql, where the /opt/firebird directory is often owned by the firebird user.
- CVE-2022-29549 has been assigned by [email protected] to track the vulnerability - currently rated as HIGH severity.
CVSS3 Score: 7.3 - HIGH
|Full Disclosure: Multiple vulnerabilities discovered in Qualys Cloud Agent|| seclists.org |
|FULLDISC 20220912 Multiple vulnerabilities discovered in Qualys Cloud Agent|
|Category: Vulnerabilities and Threat Research | Qualys Security Blog|| blog.qualys.com |
|Qualys Cloud Agent Arbitrary Code Execution ≈ Packet Storm|| packetstormsecurity.com |
|Qualys Security Updates: Cloud Agent for Linux | Qualys Security Blog|| blog.qualys.com |
|firstworks software and systems: Getting Started with Firebird|| software.firstworks.com |
Related QID Numbers
- 376807 Qualys Cloud Agent for Linux Privilege Escalation Vulnerability
Known Affected Configurations (CPE V2.3)
|Application||Qualys||Cloud Agent For Linux||All||All||All||All|