CVE-2024-1683CWE-78
DLL Injection in Tenable Identity Exposure Secure Relay
High · published February 23, 2024
What it is
A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.
The record
Technical detail
- CVSS v3.1
- 7.3 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00310 · 22.6th percentile
- Weakness
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Published
- 2024-02-23T00:02Z
EPSS history
Timeline