The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6283 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6795 advisory.

  - A vulnerability was found in insights-client. This security issue occurs because of insecure file     operations or unsafe handling of temporary files and directories that lead to local privilege escalation.
    Before the insights-client has been registered on the system by root, an unprivileged local user or     attacker could create the /var/tmp/insights-client directory (owning the directory with read, write, and     execute permissions) on the system. After the insights-client is registered by root, an attacker could     then control the directory content that insights are using by putting malicious scripts into it and     executing arbitrary code as root (trivially bypassing SELinux protections because insights processes are     allowed to disable SELinux system-wide). (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6282 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6795 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6811 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6796 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6284 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6264 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6798 advisory.

  - insights-client: unsafe handling of temporary files and directories (CVE-2023-3972)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
184200	RHEL 8 : insights-client (RHSA-2023:6283)	Nessus	Red Hat Local Security Checks	11/2/2023	4/23/2024	high
187250	CentOS 7 : insights-client (RHSA-2023:6795)	Nessus	CentOS Local Security Checks	12/22/2023	12/22/2023	high
184201	RHEL 9 : insights-client (RHSA-2023:6282)	Nessus	Red Hat Local Security Checks	11/2/2023	4/28/2024	high
185358	RHEL 7 : insights-client (RHSA-2023:6795)	Nessus	Red Hat Local Security Checks	11/8/2023	4/28/2024	high
185369	RHEL 8 : insights-client (RHSA-2023:6811)	Nessus	Red Hat Local Security Checks	11/8/2023	4/28/2024	high
185376	RHEL 9 : insights-client (RHSA-2023:6796)	Nessus	Red Hat Local Security Checks	11/8/2023	4/28/2024	high
184206	RHEL 8 : insights-client (RHSA-2023:6284)	Nessus	Red Hat Local Security Checks	11/2/2023	4/28/2024	high
184208	RHEL 8 : insights-client (RHSA-2023:6264)	Nessus	Red Hat Local Security Checks	11/2/2023	4/28/2024	high
185370	RHEL 8 : insights-client (RHSA-2023:6798)	Nessus	Red Hat Local Security Checks	11/8/2023	4/28/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high