Description
A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Tenable Identity Exposure (SaaS) | < 3.126.0 | 3.126.0 |