CVE-2022-3499 - An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present

Back Back to CVE browser

MEDIUM

An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present

Published Oct 31, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.86%

Description

An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.

Affected products

Vendor n/a Product Tenable Nessus Default
n/a
- Version
  10.3.1 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Tenable Nessus

n/a

Version	Status	Constraints
10.3.1 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42871
Advisory
https://www.tenable.com/security/tns-2022-21
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42871		Advisory
https://www.tenable.com/security/tns-2022-21		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner tenable

Published Oct 31, 2022

Updated May 5, 2025

Reserved Oct 13, 2022

Link CVE-2022-3499

CISA Vulnrichment

Updated May 5, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3499

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-3499

ENISA EUVD

Assigner tenable

Published Oct 31, 2022

Updated May 5, 2025

Exploited since n/a

Link EUVD-2022-42871

EUVD-2022-42871