CVE-2022-0130

Tenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution vulnerability which could allow a remote, unauthenticated attacker to execute code under special circumstances. An attacker would first have to stage a specific file type in the web server root of the Tenable.sc host prior to remote exploitation.

Score

CVSS 3.1 8.1 High

Status

Modified - vulnreport@tenable.com

Published

2022-01-14

Last modified

2024-08-02

Affected products

• Tenable.sc (Tenable)

References

• https://www.tenable.com/security/tns-2022-01