Vulnerability · Published Jun 26, 2023 · Assigned by tenable
CVE-2023-2005Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
Medium 6.3
In plain English
A medium-severity uncontrolled search path in Nessus from Tenable. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Official description
Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Tenable | Tenable.io | 0 – before Plugin Feed ID #202306261202 |
| Tenable | Nessus | 0 – before Plugin Feed ID #202306261202 |
| Tenable | Security Center | 0 – before Plugin Feed ID #202306261202 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H