Lucene search

PRIOn knowledge basePRION:CVE-2023-0476

HistoryJan 26, 2023 - 9:18 p.m.

Design/Logic Flaw

2023-01-2621:18:00

PRIOn knowledge base

www.prio-n.com

tenable.sc

ldap injection

active directory

authenticated attacker

blind injection

nvd

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.0%

JSON

A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection.

CPENameOperatorVersion
tenable.scle5.23.1

CPE	Name	Operator	Version
	tenable.sc	le	5.23.1

References

www.tenable.com/security/tns-2023-03