CVE-2023-28141

<br /> An NTFS Junction condition exists in the Qualys Cloud Agent<br /> for Windows platform in versions before 4.8.0.31. Attackers may write files to<br /> arbitrary locations via a local attack vector. This allows attackers to assume<br /> the privileges of the process, and they may delete or otherwise on unauthorized<br /> files, allowing for the potential modification or deletion of sensitive files<br /> limited only to that specific directory/file object. This vulnerability is<br /> bounded to the time of installation/uninstallation and can only be exploited locally.<br /> <br /> <br /> <br /> At the time of this disclosure, versions before 4.0 are<br /> classified as End of Life.<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br />