Detections
Analytics
Tenable Nessus < 10.5.5 Multiple Vulnerabilities (TNS-2023-31)
medium Nessus Plugin ID 181786
Language:
Synopsis
An instance of Nessus installed on the remote system is affected by multiple vulnerabilities.Description
According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-31 advisory.- A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application. (CVE-2023-3251)
- An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition. (CVE-2023-3252)
- An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application. (CVE-2023-3253) Tenable has released Nessus 10.5.5 to address these issues. The installation files can only be obtained via the Nessus Feed. (CVE-2023-3251, CVE-2023-3252, CVE-2023-3253)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Tenable Nessus 10.5.5 or later.See Also
Plugin Details
Severity: Medium
ID: 181786
File Name: nessus_TNS-2023-31.nasl
Version: 1.1
Type: combined
Family: Misc.
Published: 9/22/2023
Updated: 6/13/2024
Configuration: Enable thorough checks
Supported Sensors: Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: High
Base Score: 7.7
Temporal Score: 5.7
Vector: CVSS2#AV:N/AC:L/Au:M/C:N/I:C/A:C
CVSS Score Source: CVE-2023-3252
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:tenable:nessus
Required KB Items: installed_sw/Tenable Nessus
Exploit Ease: No known exploits are available
Patch Publication Date: 9/21/2023
Vulnerability Publication Date: 8/29/2023