CVE-2023-0101 - A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1

Back Back to CVE browser

HIGH

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1

Published Jan 20, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.82%

Description

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.

Affected products

Vendor n/a Product Nessus Default
n/a
- Version
  8.10.1 through 8.15.8, 10.0.0 through 10.4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Nessus

n/a

Version	Status	Constraints
8.10.1 through 8.15.8, 10.0.0 through 10.4.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://www.tenable.com/security/tns-2023-01
PatchRelease NotesVendor Advisory
https://www.tenable.com/security/tns-2023-02
PatchRelease NotesVendor Advisory

Link	Providers	Tags
https://www.tenable.com/security/tns-2023-01		PatchRelease NotesVendor Advisory
https://www.tenable.com/security/tns-2023-02		PatchRelease NotesVendor Advisory