DeutschShown in its original language — a full translation is planned for a future version.
Tenable Security Nessus: Mehrere Schwachstellen
view advisory published 2023-08-29
Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3253US | medium4.3OT elevated | — | ||
An improper authorization vulnerability exists where an authenticated,
low privileged remote attacker could view a list of all the users
available in the application.
| ||||
| CVE-2023-3252US | medium6.5 | — | ||
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on th… | ||||
| CVE-2023-3251US | medium4.9 | — | ||
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This iss… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan