CVE-2024-29863

HIGH

Qlik Qlikview <May 2022 SR3 - Privilege Escalation

Title source: llm

Description

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator.

Exploits (1)

nomisec WORKING POC

by pawlokk · poc

https://github.com/pawlokk/qlikview-poc-CVE-2024-29863

View Code ZIP pw:eip

References (1)

[Various Sources] https://community.qlik.com/t5/Official-Support-Articles/High-Severity-Security-fix-for-QlikView-CVE-2024-29863/ta-p/2432661

Scores

CVSS v3 7.8

EPSS 0.0321

EPSS Percentile 87.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-362

Status published

Published Apr 05, 2024

Tracked Since Feb 18, 2026