CVE-2022-32974

2022-06-2114:23:31

tenable

www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials.

CNA Affected

[
  {
    "product": "Nessus",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Nessus 10.1.X and earlier"
      }
    ]
  }
]

References

www.tenable.com/security/tns-2022-11