Tenable Security Center < 6.3.0 Multiple Vulnerabilities (TNS-2024-02)

According to its self-reported version, the Tenable Security Center running on the remote host is prior to version 6.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-02 advisory. - Security Center leverages third-party software to help provide underlying...

CVE-2024-1367

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

CVE-2024-1471

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1471

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1367

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

Command injection

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

Design/Logic Flaw

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1471 HTML Injection Vulnerability

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1471

CVE-2024-1471 is an HTML injection vulnerability affecting Tenable Security Center (prior to 6.3.0). An authenticated administrator could modify Repository parameters, potentially causing HTML redirection. Impact is described as Medium (per CVSS metrics: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N or I:L...

CVE-2024-1471 HTML Injection Vulnerability

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters, which could lead to HTML redirection attacks...

CVE-2024-1367 Command Injection Vulnerability in Tenable Security Center

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

CVE-2024-1367 Command Injection Vulnerability in Tenable Security Center

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host...

CVE-2024-1367

Summary: CVE-2024-1367 is a command-injection vulnerability in Tenable Security Center. An authenticated, remote attacker with administrator privileges could modify Logging parameters, potentially executing arbitrary code on the Security Center host. The issue is mitigated by the Security Center ...

[R1] Security Center Version 6.3.0 Fixes Multiple Vulnerabilities

R1 Security Center Version 6.3.0 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 02/14/2024 - 10:00 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components sqlite was found to contain vulnerabilities, and updated versions have be...

PT-2024-18075 · Unknown · Securitycenter

Name of the Vulnerable Software and Affected Versions: Security Center affected versions not specified Description: An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Repository parameters,...

PT-2024-17979 · Tenable · Tenable Security Center

Name of the Vulnerable Software and Affected Versions: Tenable Security Center affected versions not specified Description: A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging...

CVE-2023-47537

creationtimestamp| type| source ---|---|--- 2024-02-09 10:14:28+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus8/2024 2024-02-09 11:20:05+00:00| seen| https://t.me/truesecator/5396 2024-02-15 15:31:37+00:00| seen| https://t.me/ctinow/185611 2024-03-02 16:11:50+00:00| seen|...

CVE-2024-23651

creationtimestamp| type| source ---|---|--- 2024-01-31 22:35:37+00:00| seen| Telegram/g77oYQgQgNWeGzTKzEzBqvOnDry1Bvbe5EDmpRTUMlzAQ 2024-01-31 23:07:57+00:00| seen| https://t.me/KomunitiSiber/1424 2024-01-31 23:26:21+00:00| seen| https://t.me/ctinow/177174 2024-02-01 15:41:22+00:00| seen|...

[R1] Stand-alone Security Patch Available for Tenable Security Center versions 5.23.1, 6.0.0, 6.1.0, 6.1.1, and 6.2.0: SC-202312.1

R1 Stand-alone Security Patch Available for Tenable Security Center versions 5.23.1, 6.0.0, 6.1.0, 6.1.1, and 6.2.0: SC-202312.1 Arnie Cabral Thu, 12/14/2023 - 10:41 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components Apache w...

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler application delivery control ADC and Gateway appliances to obtain initial access to target environments. The joint advisory comes from the U.S...