CVE-2023-0101

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.

Score

CVSS 3.1 8.8 High

Status

Modified - vulnreport@tenable.com

Published

2023-01-20

Last modified

2025-04-02

Weaknesses

CWE-269

Affected products

• Nessus (Tenable)

References

• https://www.tenable.com/security/tns-2023-01
• https://www.tenable.com/security/tns-2023-02