Lucene search

TenableCVELIST:CVE-2024-5759

HistoryJun 12, 2024 - 4:00 p.m.

CVE-2024-5759 Improper privilege management

2024-06-1216:00:26

CWE-269

tenable

www.cve.org

cve-2024-5759

tenable security center

privilege management

vulnerability

unauthorized objects

remote attacker

scans

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

EPSS

Percentile

13.8%

JSON

An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Security Center",
    "vendor": "Tenable",
    "versions": [
      {
        "lessThan": "6.4.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.tenable.com/security/tns-2024-10

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

EPSS

Percentile

13.8%

JSON

Related for CVELIST:CVE-2024-5759