CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-3251 – Pass-back vulnerability in Nessus
https://notcve.org/view.php?id=CVE-2023-3251
29 Aug 2023 — A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0. • https://www.tenable.com/security/tns-2023-29 • CWE-522: Insufficiently Protected Credentials •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2023-2005 – Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2023-2005
26 Jun 2023 — Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges. • https://www.tenable.com/security/tns-2023-21 • CWE-427: Uncontrolled Search Path Element •
CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-4313
https://notcve.org/view.php?id=CVE-2022-4313
15 Mar 2023 — A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets. • https://www.tenable.com/security/tns-2023-14 • CWE-427: Uncontrolled Search Path Element •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2023-0524
https://notcve.org/view.php?id=CVE-2023-0524
01 Feb 2023 — As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue and also made several defense-in-depth fixes alongside. While the probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our products. The updates have been d... • https://www.tenable.com/security/tns-2023-04 • CWE-269: Improper Privilege Management •
CVSS: 9.0EPSS: 0%CPEs: 2EXPL: 0CVE-2023-0101
https://notcve.org/view.php?id=CVE-2023-0101
20 Jan 2023 — A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host. Se identificó una vulnerabilidad de escalada de privilegios en las versiones de Nessus 8.10.1 a 8.15.8 y 10.0.0 a 10.4.1. Un atacante autenticado podría potencialmente ejecutar un archivo especialmente manipulado para obtener privilegios de roo... • https://www.tenable.com/security/tns-2023-01 • CWE-269: Improper Privilege Management •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-3499
https://notcve.org/view.php?id=CVE-2022-3499
31 Oct 2022 — An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present. Un atacante autenticado podría utilizar claves de enlace de nodo de cluster y agente idénticas para permitir potencialmente un escenario en el que esté presente la divulgación no autorizada de registros y datos del agente. • https://www.tenable.com/security/tns-2022-21 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-33757
https://notcve.org/view.php?id=CVE-2022-33757
24 Oct 2022 — An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance. Un atacante autenticado podría leer los archivos adjuntos de Nessus Debug Log desde la interfaz web sin tener los privilegios correctos para hacerlo. Esto puede conllevar a una divulgación de información sobre el objetivo del esc... • https://www.tenable.com/security/tns-2022-11 • CWE-284: Improper Access Control •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28291
https://notcve.org/view.php?id=CVE-2022-28291
17 Oct 2022 — Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an attacker to access credentials stored in Nessus scanners, potentially compromising its customers’ network of assets. Unas Credenciales Insuficientemente Protegidas: Un usuario autenticado con privilegios de depuración... • https://cybersecurityworks.com/blog/zero-days/csw-expert-discovers-a-zero-day-vulnerability-in-tenables-nessus-scanner.html • CWE-522: Insufficiently Protected Credentials •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32974
https://notcve.org/view.php?id=CVE-2022-32974
21 Jun 2022 — An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials. Un atacante autenticado podría leer archivos arbitrarios del sistema operativo subyacente del escáner usando un archivo de auditoría de cumplimiento diseñado a medida sin proporcionar ninguna credencial SSH válida • https://www.tenable.com/security/tns-2022-11 •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32973
https://notcve.org/view.php?id=CVE-2022-32973
21 Jun 2022 — An authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges. Un atacante autenticado podría crear un archivo de auditoría que omita las comprobaciones del cmdlet de PowerShell y ejecute comandos con privilegios de administrador • https://www.tenable.com/security/tns-2022-11 •