Skip to content
OpenAdvisories
Medium WID-SEC-2023-2204 3 CVEs

Tenable Security Nessus: Mehrere Schwachstellen

Published Aug 29, 2023 · Updated Sep 21, 2023 · Revision 2 · de-DE

Vendor: Tenable Security Product: Nessus Product: Nessus < 10.5.5 Product: Nessus < 10.6.0 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.

Product

Nessus ist ein Schwachstellen-Scanner, welcher neben bekannten Schwachstellen auch Software-Patchstände und Konfigurationen überprüfen kann.

Vulnerabilities 3

  • Medium 6.8
    CVE-2023-3252

    Arbitrary File Write

    An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.

    Tenable Nessus
  • Medium 4.3
    CVE-2023-3253

    Improper authorization in Nessus

    An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application.

    Tenable Nessus
  • Medium 4.1
    CVE-2023-3251

    Pass-back vulnerability in Nessus

    A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.

    Tenable Nessus

Revision history

  1. #2

    Neue Updates von Tenable aufgenommen

  2. #1

    Initiale Fassung

References