CVE-2023-2005 Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability
HighCVSS 8.8
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 .
This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tenable.io | < Plugin Feed ID #202306261202 | Plugin Feed ID #202306261202 |
| tenable Nessus | < Plugin Feed ID #202306261202 | Plugin Feed ID #202306261202 |
| tenable Security Center | < Plugin Feed ID #202306261202 | Plugin Feed ID #202306261202 |
| tenable Nessus | All versions | No fix listed |
| tenable Security Center | All versions | No fix listed |
| Tenable.io | All versions | No fix listed |
References
- www.tenable.com vendor-advisory