CVE-2022-29549

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks (e.g., to help ensure that a program was installed by root) and without integrity checks (e.g., a checksum comparison against known legitimate programs). Also, the vendor recommendation is to install this agent software with root privileges. Thus, privilege escalation is possible on systems where any of these pathnames is controlled by a non-root user. An example is /opt/firebird/bin/isql, where the /opt/firebird directory is often owned by the firebird user.

• CWE-354

• http://packetstormsecurity.com/files/168367/Qualys-Cloud-Agent-Arbitrary-Code-Execution.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2022/Sep/10Mailing List, Third Party Advisory
• http://software.firstworks.com/p/getting-started-with-firebird.htmlNot Applicable
• https://blog.qualys.com/product-tech/2022/08/15/qualys-security-updates-cloud-agent-for-linuxVendor Advisory
• https://blog.qualys.com/vulnerabilities-threat-researchVendor Advisory
• http://packetstormsecurity.com/files/168367/Qualys-Cloud-Agent-Arbitrary-Code-Execution.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2022/Sep/10Mailing List, Third Party Advisory
• http://software.firstworks.com/p/getting-started-with-firebird.htmlNot Applicable
• https://blog.qualys.com/product-tech/2022/08/15/qualys-security-updates-cloud-agent-for-linuxVendor Advisory
• https://blog.qualys.com/vulnerabilities-threat-researchVendor Advisory

Published

Aug 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Contr…5.3
• CVE-2022-29539resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Comm…9.8
• CVE-2022-29540resi-calltrace in RESI Gemini-Net 4.2 is affected by Multipl…6.1
• CVE-2022-29546HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial…7.5
• CVE-2022-29547The CreateRedirect extension before 2022-04-14 for MediaWiki…7.5
• CVE-2022-29548A reflected XSS issue exists in the Management Console of se…6.1
• CVE-2022-29550An issue was discovered in Qualys Cloud Agent 4.8.0-49. It w…5.5
• CVE-2022-29555The Deviceconnect microservice through 1.3.0 in Northern.tec…8.8
• CVE-2022-29556The iot-manager microservice 1.0.0 in Northern.tech Mender E…9.8
• CVE-2022-29557LexisNexis Firco Compliance Link 3.7 allows CSRF.8.8
• CVE-2022-29558Realtek rtl819x-SDK before v3.6.1 allows command injection o…8.8
• CVE-2022-2956A vulnerability classified as problematic has been found in …6.1