According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-31 advisory.

  - A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges     could uncover stored SMTP credentials within the Nessus application. (CVE-2023-3251)        
  - An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges     could alter logging variables to overwrite arbitrary files on the remote host with log data, which could     lead to a denial of service condition. (CVE-2023-3252)        
  - An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view     a list of all the users available in the application. (CVE-2023-3253)       Tenable has released Nessus 10.5.5 to address these issues. The installation files can only be obtained via the Nessus Feed.   (CVE-2023-3251, CVE-2023-3252, CVE-2023-3253)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Tenable Nessus < 10.5.5 Multiple Vulnerabilities (TNS-2023-31)

medium Nessus Plugin ID 181786

Version 1.1

Version 1.0

Version 1.1 Jun 13, 2024, 9:47 AM New Plugin Feed: 202406130947
Version 1.0 Sep 22, 2023, 4:04 PM New Plugin Feed: 202309221604