Severity: Critical
ID: 201811
File Name: mariner_CVE-2023-48795.nasl
Version: 1.5
Type: local
Family: MarinerOS Local Security Checks
Published: 7/3/2024
Updated: 11/9/2024
Supported Sensors: Nessus
Risk Factor: Medium
Score: 6.1
Risk Factor: Medium
Base Score: 5.4
Temporal Score: 4.2
Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:C/A:N
CVSS Score Source: CVE-2023-48795
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Risk Factor: Critical
Base Score: 9.3
Threat Score: 8.9
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CPE: p-cpe:/a:microsoft:cbl-mariner:kubernetes-kube-proxy, p-cpe:/a:microsoft:cbl-mariner:libssh-debuginfo, p-cpe:/a:microsoft:cbl-mariner:cert-manager-cainjector, p-cpe:/a:microsoft:cbl-mariner:kubernetes-kubeadm, p-cpe:/a:microsoft:cbl-mariner:libssh-devel, p-cpe:/a:microsoft:cbl-mariner:kubernetes-kube-controller-manager, x-cpe:/o:microsoft:cbl-mariner, p-cpe:/a:microsoft:cbl-mariner:kubernetes-client, p-cpe:/a:microsoft:cbl-mariner:cert-manager-acmesolver, p-cpe:/a:microsoft:cbl-mariner:erlang, p-cpe:/a:microsoft:cbl-mariner:cert-manager-controller, p-cpe:/a:microsoft:cbl-mariner:kubernetes-kube-apiserver, p-cpe:/a:microsoft:cbl-mariner:kubernetes-kube-scheduler, p-cpe:/a:microsoft:cbl-mariner:cert-manager-cmctl, p-cpe:/a:microsoft:cbl-mariner:kubernetes-pause, p-cpe:/a:microsoft:cbl-mariner:kubernetes, p-cpe:/a:microsoft:cbl-mariner:cert-manager-debuginfo, p-cpe:/a:microsoft:cbl-mariner:libssh-config, p-cpe:/a:microsoft:cbl-mariner:libssh, p-cpe:/a:microsoft:cbl-mariner:cert-manager, p-cpe:/a:microsoft:cbl-mariner:cert-manager-webhook
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/CBLMariner/release, Host/CBLMariner/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/1/2024
Vulnerability Publication Date: 12/18/2023
CVE: CVE-2023-48795
IAVA: 2023-A-0703