Medium WID-SEC-2025-2574 1 CVE

Qualys Cloud Agent: Schwachstelle ermöglicht Privilegieneskalation

Published Nov 11, 2025 · Updated Nov 11, 2025 · de-DE

Vendor: Qualys Product: Cloud Agent Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Qualys Cloud Agent ausnutzen, um seine Privilegien zu erhöhen.

Product

Qualys Cloud Agents ermöglichen die Integration von Endpoints an die Qualys Suite.

Vulnerabilities 1

Medium 6.3

CVE-2025-43079

Local Privilege Escalation via qagent_uninstall.sh Qualys Cloud Agents

The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall sc…

Qualys Qualys Agent

Nov 10, 2025

Revision history

2025-11-11 #1
Initiale Fassung

References

Qualys Security Advisory vom 2025-11-11
https://www.qualys.com/security-advisories/cve-2025-43079/
CVE Record
https://www.cve.org/cverecord?id=CVE-2025-43079