This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Tenable | Tenable.io | unaffected |
|
||||||
| Tenable | Nessus | unaffected |
|
||||||
| Tenable | Security Center | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Vendor Solution
The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202306261202.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-33535 | Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges. |
| Link | Providers |
|---|---|
| https://www.tenable.com/security/tns-2023-21 |
|
Tue, 03 Dec 2024 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-427 | |
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: tenable
Published:
Updated: 2024-12-03T18:44:10.535Z
Reserved: 2023-04-12T15:39:04.752Z
Link: CVE-2023-2005
Vulnrichment
Updated: 2024-08-02T06:05:27.147Z
NVD
Status : Modified
Published: 2023-06-26T18:15:09.580
Modified: 2024-12-03T19:15:06.390
Link: CVE-2023-2005
Redhat
No data.
OpenCVE Enrichment
No data.