High WID-SEC-2023-3032 4 CVEs

Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Published Nov 29, 2023 · Updated Dec 4, 2023 · Revision 2 · de-DE

Vendor: Tenable Security Product: Nessus Network Monitor < 6.3.1 Platform: Linux Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen oder Dateien zu manipulieren.

Product

Tenable Nessus Network Monitor ist ein Netzwerküberwachungstool zur Inventarisierung und Überwachung von Netzwerkgeräten und den genutzten Protokollen.

Vulnerabilities 4

Critical 9.8

CVE-2018-9206 Public exploit Scanner template EPSS 97%

Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

Blueimp Blueimp jQuery-File-Upload libjs-jquery-file-upload blueimp-file-upload Debian Ubuntu npm

Oct 11, 2018
High 7.5

CVE-2023-5363

Incorrect cipher key & IV length processing

Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result …

OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 24, 2023
Medium 5.6

CVE-2021-23369 Public exploit

Remote Code Execution (RCE)

The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source.

handlebars node-handlebars node-handlebars org.webjars:handlebars Debian Ubuntu npm Maven

Apr 12, 2021
Medium 5.6

CVE-2021-23383 Public exploit

Prototype Pollution

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

handlebars node-handlebars node-handlebars Debian Ubuntu npm

May 4, 2021

Revision history

2023-12-04 #2
Änderung an der Produktbeschreibung
2023-11-29 #1
Initiale Fassung

References

Tenable Security Advisories vom 2023-11-29
https://de.tenable.com/security/tns-2023-43