CVE-2023-2005CWE-427

CVE-2023-2005

Medium · published June 26, 2023

CVSS v3.1
6.3
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 .

This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.3th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-06-26T22:15Z
Affected products (3)
ProductVersionsFixed in
tenable/nessusall versions—
tenable/security_centerall versions—
tenable/tenable.ioall versions—
References (2)
https://www.tenable.com/security/tns-2023-21 · [email protected]https://www.tenable.com/security/tns-2023-21 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 26 JUN 17:39Z
    Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
    cvelistv5