Qualys Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:qualys_inc:qualys_agent:*:*:ibm_aix:*:*:*:*:*part: a version: * update: *
| Vendor | Qualys Inc (eadcc6d5-7f1b-5bbe-aa0e-b13af76b8466) |
|---|---|
| Product | Qualys Agent (975d2821-c221-5c6d-b3f8-c15d0e0f23f8) |
| Edition | ibm_aix |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-43079 |
vulnerable | 2026-06-08 07:25:08.603224 |
Local Privilege Escalation via qagent_uninstall.sh Qualys Cloud Agents
MEDIUM (6.3)
The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges (e.g., via sudo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious executables to be run in place of the intended system binaries. This behavior can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges.
Published: 2025-11-10T17:10:31.066Z
Updated: 2026-03-18T17:10:59.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.