CVE-2023-5847

Published: Nov 1, 2023Modified: Nov 21, 2024

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

Affected (2)

Products: Tenable: Nessus, Nessus Agent

Tenable

2 products

Nessus

Nessus Agent

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Tenable Nessus	Before 10.6.2
Tenable Nessus Agent	Before 10.4.3

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

https://www.tenable.com/security/tns-2023-37

Source: vulnreport@tenable.com

Vendor Advisory

https://www.tenable.com/security/tns-2023-38

Source: vulnreport@tenable.com

Vendor Advisory

https://www.tenable.com/security/tns-2023-37

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.tenable.com/security/tns-2023-38

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.