CVEvulnerability

CVE-2023-3252

6.5 MEDIUM Published 2023-08-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-427

Description

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.

Affected configurations

• tenable nessus (< 10.6.0)

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References