Tenable Nessus Agent SEoL (10.2.x)

According to its version, Tenable Nessus Agent is 10.2.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 8090...

Tenable Nessus Agent < 10.4.1 Multiple Vulnerabilities (TNS-2023-24)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is prior to 10.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-24 advisory. - Nessus Agent leverages third-party software to help provide underlying functionality...

[R1] Nessus Agent Version 10.4.1 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 10.4.1 Fixes Multiple Vulnerabilities Jason Schavel Mon, 07/03/2023 - 13:44 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been...

Tenable Nessus Agent 8.3.3 <= 8.3.4 Multiple Vulnerabilities (TNS-2023-13)

Tenable Nessus Agent is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenable Nessus Agent < 8.2.2 Multiple Vulnerabilities (TNS-2020-13)

Tenable Nessus Agent is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenable Nessus Agent 10.2.1 <= 10.3.1 Multiple Vulnerabilities (TNS-2023-12)

Tenable Nessus Agent is prone to multiple vulnerabilities in OpenSSL. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenable Nessus Agent 8.3.3 / 8.3.4 Multiple Vulnerabilities (TNS-2023-13)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is either 8.3.3 or 8.3.4. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 1.1.1t: - An attacker that had observed a genuine connection between a client and a server could...

Tenable Nessus Agent 10.x >= 10.2.1 and < 10.3.2 Multiple Vulnerabilities (TNS-2023-12)

According to its self-reported version, the Tenable Nessus Agent running on the remote host is between 10.2.1 and 10.3.2. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 3.0.8: - An attacker that had observed a genuine connection between a client and a server...

[R1] Nessus Agent Version 8.3.5 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 8.3.5 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 03/09/2023 - 15:30 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been ma...

[R2] Nessus Agent Version 10.3.2 Fixes Multiple Vulnerabilities

R2 Nessus Agent Version 10.3.2 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 03/09/2023 - 14:18 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been...

Tenable Nessus Agent < 10.2.1 Multiple Vulnerabilities (TNS-2022-22)

Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessusagent";...

Tenable Nessus Agent < 8.3.4 Multiple Vulnerabilities (TNS-2022-17)

Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessusagent";...

Tenable Nessus Agent < 10.1.4 Multiple Vulnerabilities (TNS-2022-13)

Tenable Nessus Agent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tenable:nessusagent";...

Tenable Nessus Agent < 8.3.3, 10.x < 10.1.3 DoS Vulnerability (TNS-2022-07)

Tenable Nessus Agent is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenable Nessus Agent 10.x < 10.2.1 Multiple Vulnerabilities (TNS-2022-22)

According to its self-reported version, the Tenable Nessus agent running on the remote host is 10.x prior to 10.2.1. It is, therefore, affected by multiple vulnerabilities: - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking...

[R1] Nessus Agent Version 10.2.1 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 10.2.1 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 11/02/2022 - 10:30 Nessus Agent leverages third-party software to help provide underlying functionality. One of the third-party components OpenSSL was found to contain vulnerabilities, and updated versions have been...

Vulnerabilities fixed in Nessus Agent

Tenable has fixed two vulnerabilities in Nessus Agent. A authenticated malicious person with the ability and knowledge to create custom audit files could exploit the vulnerabilities to execute code with administrator privileges, or to access gain access to arbitrary system files of the underlying...

[R1] Nessus Agent Version 8.3.4 Fixes Multiple Vulnerabilities

R1 Nessus Agent Version 8.3.4 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 08/24/2022 - 12:18 Custom audit files bring tremendous power and flexibility when assessing the configuration of your assets. Two separate vulnerabilities that utilize this custom Audit functionality were identified,...

Vulnerabilities fixed in Tenable Nessus Agent

Vulnerabilities have been fixed in Tenable Nessus Agent. The vulnerabilities allow a malicious person with elevated privileges to able to execute arbitrary code under administrator privileges and the read arbitrary files on the underlying system. Tenable has released a new version of Nessus Agent...

Tenable Network Security Nessus 输入验证错误漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. An input validation error vulnerability exists in Tenable Network Security Nessus Agent version 10.1.3 and earlier versions, which can be exploited by an authenticated attacker to re...