CVE-2023-5847

2023-11-0116:15:08

CWE-269

[email protected]

web.nvd.nist.gov

cve-2023-5847

privilege escalation

installation

upgrade

windows

linux

nvd

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.2%

JSON

Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

Affected configurations

NVD

Node

tenablenessusRange<10.6.2

tenablenessus_agentRange<10.4.3

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
tenable:nessustenable nessuslt10.6.2
tenable:nessus_agenttenable nessus agentlt10.4.3

CPE	Name	Operator	Version
tenable:nessus	tenable nessus	lt	10.6.2
tenable:nessus_agent	tenable nessus agent	lt	10.4.3

CNA Affected

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "Nessus",
    "vendor": "Tenable",
    "versions": [
      {
        "lessThan": "10.6.2",
        "status": "affected",
        "version": "0",
        "versionType": "10.6.2"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "Nessus Agent",
    "vendor": "Tenable",
    "versions": [
      {
        "lessThan": "10.4.3",
        "status": "affected",
        "version": "0",
        "versionType": "10.4.3"
      }
    ]
  }
]