CVEvulnerability
CVE-2023-6062
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-787
Description
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.
Affected configurations
• tenable nessus (< 10.5.7)
• tenable nessus (>= 10.6.0 < 10.6.3)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.tenable.com/security/tns-2023-39 Vendor Advisory
- https://www.tenable.com/security/tns-2023-40 Vendor Advisory
- https://www.tenable.com/security/tns-2023-39 Vendor Advisory
- https://www.tenable.com/security/tns-2023-40 Vendor Advisory