CVE-2023-2005

Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

Score

CVSS 3.1 8.8 High

Status

Modified - vulnreport@tenable.com

Published

2023-06-26

Last modified

2024-12-03

Weaknesses

CWE-427

Affected products

• Nessus (Tenable)
• Security Center (Tenable)
• Tenable.io (Tenable)

References

• https://www.tenable.com/security/tns-2023-21