Vulnerability · Published Oct 31, 2022 · Assigned by tenable
CVE-2022-3499
Medium 6.5
In plain English
A medium-severity sensitive data in logs in Tenable Nessus. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.0%top 38.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Tenable Nessus | 10.3.1 and earlier |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N