A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unprivileged local user or attacker could create the /var/tmp/insights-client directory (owning the directory with read, write, and execute permissions) on the system. After the insights-client is registered by root, an attacker could then control the directory content that insights are using by putting malicious scripts into it and executing arbitrary code as root (trivially bypassing SELinux protections because insights processes are allowed to disable SELinux system-wide).

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6795 advisory.

  - A vulnerability was found in insights-client. This security issue occurs because of insecure file     operations or unsafe handling of temporary files and directories that lead to local privilege escalation.
    Before the insights-client has been registered on the system by root, an unprivileged local user or     attacker could create the /var/tmp/insights-client directory (owning the directory with read, write, and     execute permissions) on the system. After the insights-client is registered by root, an attacker could     then control the directory content that insights are using by putting malicious scripts into it and     executing arbitrary code as root (trivially bypassing SELinux protections because insights processes are     allowed to disable SELinux system-wide). (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6796 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6798 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6811 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6795 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6264 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6284 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6282 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6283 advisory.

    Red Hat Insights is a service that provides analysis of registered Red Hat-based systems. The insights-     client package can gather the required data (such as installed packages, running services, or software     configurations) to proactively identify threats to security, performance, and stability across your     environment.

    Security Fix(es):

    * insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196095	RHEL 6 : insights-client (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
187250	CentOS 7 : insights-client (RHSA-2023:6795)	Nessus	CentOS Local Security Checks	high
185376	RHEL 9 : insights-client (RHSA-2023:6796)	Nessus	Red Hat Local Security Checks	high
185370	RHEL 8 : insights-client (RHSA-2023:6798)	Nessus	Red Hat Local Security Checks	high
185369	RHEL 8 : insights-client (RHSA-2023:6811)	Nessus	Red Hat Local Security Checks	high
185358	RHEL 7 : insights-client (RHSA-2023:6795)	Nessus	Red Hat Local Security Checks	high
184208	RHEL 8 : insights-client (RHSA-2023:6264)	Nessus	Red Hat Local Security Checks	high
184206	RHEL 8 : insights-client (RHSA-2023:6284)	Nessus	Red Hat Local Security Checks	high
184201	RHEL 9 : insights-client (RHSA-2023:6282)	Nessus	Red Hat Local Security Checks	high
184200	RHEL 8 : insights-client (RHSA-2023:6283)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2023-3972

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high