The version of the Tenable Identity Exposure running on the remote host is prior to 3.77.9. It is, therefore, affected by multiple vulnerabilities according to advisory TNS-2025-01, including the following:

  - libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel     after having completed a threaded name resolve. (CVE-2025-0665)

  - With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread     is created. This is not limited only to workers but also exposes internal workers, where an instance     of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This     vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23. (CVE-2025-23083)

  - When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with     the CURLOPT_ACCEPT_ENCODING option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer     overflow would make libcurl perform a buffer overflow. (CVE-2025-0725)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Tenable Identity Exposure < 3.77.9 Multiple Vulnerabilities (TNS-2025-01)

medium Nessus Plugin ID 215200

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Feb 21, 2025, 7:42 PM New Plugin Feed: 202502211942
Version 1.2 Feb 14, 2025, 3:26 PM Detection (Deprecated plugin) Plugin Feed: 202502141526
Version 1.1 Feb 10, 2025, 7:58 PM New Plugin Feed: 202502101958