CVE-2022-33757

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so

Medium · published October 24, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. This may lead to the disclosure of information on the scan target and/or the Nessus scan to unauthorized parties able to reach the Nessus instance.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00960 · 61.2th percentile
Published
2022-10-24T21:12Z
EPSS history
Timeline
  • 24 OCT 21:12Z
    An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so
    cvelistv5