Skip to content
OpenAdvisories
High · 7.3 CVE-2024-1683 EUVD-2024-17417GHSA-3fhw-3rw6-474c

DLL Injection in Tenable Identity Exposure Secure Relay

Published Feb 23, 2024 · Updated Aug 1, 2024 · Assigned by tenable

Description

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.

Affected products

VendorProductAffectedFixed
Tenable Tenable Identity Exposure Secure Relay 3.42.17 – < 3.59.4 3.59.4

References