Tenable Identity Exposure < 3.77.13(LTS) / 3.93.2 Vulnerable Nodejs (TNS-2025-16)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(244139);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/08/06");

  script_cve_id("CVE-2025-27210");

  script_name(english:"Tenable Identity Exposure < 3.77.13(LTS) / 3.93.2 Vulnerable Nodejs (TNS-2025-16)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The version of Tenable Identity Exposure (formerly Tenable.ad) installed on the remote host is prior to 3.77.13(LTS) 
or 3.93.2. It therefore contains a version of Nodejs that could be vulnerable. Tenable has upgrade these components to 
address the potential impact of the issues.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.tenable.com/security/tns-2025-16");
  script_set_attribute(attribute:"solution", value:
"Upgrade Tenable Identity Exposure based upon the guidance specified in TNS-2025-16.");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-27210");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/06");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/06");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/06");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:tenable:tenable_identity_exposure");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:tenable:tenable_ad");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ad_win_installed.nbin", "tenable_ad_web_detect.nbin");
  script_require_keys("installed_sw/Tenable.ad");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Tenable.ad', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
        {'fixed_version' : '3.77.13', 'fixed_display' : '3.77.13 LTS / 3.93.2'}, 
        {'min_version' : '3.78.0', 'fixed_version' : '3.93.2' }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);