CVE-2024-2390 - OpenCVE

As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.tenable.com/security/tns-2024-05

History

No history.

MITRE

Status: PUBLISHED

Assigner: tenable

Published: 2024-03-18T15:37:44.698Z

Updated: 2024-08-21T14:42:09.885Z

Reserved: 2024-03-11T22:31:40.629Z

Link: CVE-2024-2390

Vulnrichment

Updated: 2024-08-01T19:11:53.526Z

NVD

Status : Awaiting Analysis

Published: 2024-03-18T16:15:09.830

Modified: 2024-03-18T19:40:00.173

Link: CVE-2024-2390

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-2390", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "state": "PUBLISHED", "assignerShortName": "tenable", "dateReserved": "2024-03-11T22:31:40.629Z", "datePublished": "2024-03-18T15:37:44.698Z", "dateUpdated": "2024-08-21T14:42:09.885Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "modules": ["Nessus Feed"], "product": "Nessus Agent", "vendor": "Tenable", "versions": [{"lessThan": "#202403142053", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "modules": ["Nessus Feed"], "product": "Nessus", "vendor": "Tenable", "versions": [{"lessThan": "#202403142053", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Rich Sprigg (RythmStick)"}], "datePublic": "2024-03-15T19:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\nAs a part of Tenable\u2019s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.\n\n<p></p>"}], "value": "\nAs a part of Tenable\u2019s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.\n\n"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2024-03-18T15:37:44.698Z"}, "references": [{"url": "https://www.tenable.com/security/tns-2024-05"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\nTenable has released updates to plugins to resolve the issue. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202403142053.\n\n<br>"}], "value": "\nTenable has released updates to plugins to resolve the issue. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202403142053.\n\n"}], "source": {"advisory": "TNS-2024-05", "discovery": "EXTERNAL"}, "title": "Local Privilege Escalation ", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:11:53.526Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.tenable.com/security/tns-2024-05", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "tenable", "product": "nessus_agent", "cpes": ["cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "#202403142053", "versionType": "custom"}]}, {"vendor": "tenable", "product": "nessus", "cpes": ["cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "#202403142053", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-21T14:01:06.803959Z", "id": "CVE-2024-2390", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-21T14:42:09.885Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.tenable.com/security/tns-2024-05", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T19:11:53.526Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-2390", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-21T14:01:06.803959Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"], "vendor": "tenable", "product": "nessus_agent", "versions": [{"status": "affected", "version": "0", "lessThan": "#202403142053", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*"], "vendor": "tenable", "product": "nessus", "versions": [{"status": "affected", "version": "0", "lessThan": "#202403142053", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-21T14:42:03.802Z"}}], "cna": {"title": "Local Privilege Escalation ", "source": {"advisory": "TNS-2024-05", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Rich Sprigg (RythmStick)"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Tenable", "modules": ["Nessus Feed"], "product": "Nessus Agent", "versions": [{"status": "affected", "version": "0", "lessThan": "#202403142053", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Tenable", "modules": ["Nessus Feed"], "product": "Nessus", "versions": [{"status": "affected", "version": "0", "lessThan": "#202403142053", "versionType": "custom"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "\nTenable has released updates to plugins to resolve the issue. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202403142053.\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\nTenable has released updates to plugins to resolve the issue. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202403142053.\n\n<br>", "base64": false}]}], "datePublic": "2024-03-15T19:00:00.000Z", "references": [{"url": "https://www.tenable.com/security/tns-2024-05"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "\nAs a part of Tenable\u2019s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\nAs a part of Tenable\u2019s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.\n\n<p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "shortName": "tenable", "dateUpdated": "2024-03-18T15:37:44.698Z"}}}, "cveMetadata": {"cveId": "CVE-2024-2390", "state": "PUBLISHED", "dateUpdated": "2024-08-21T14:42:09.885Z", "dateReserved": "2024-03-11T22:31:40.629Z", "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be", "datePublished": "2024-03-18T15:37:44.698Z", "assignerShortName": "tenable"}, "dataVersion": "5.1"}