CVE-2023-6062

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.tenable.com/security/tns-2023-39	Vendor Advisory
https://www.tenable.com/security/tns-2023-40	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tenable:nessus::::::::
	cpe:2.3:a:tenable:nessus::::::::

History

29 Nov 2023, 18:01

Type	Values Removed	Values Added
CPE		cpe:2.3:a:tenable:nessus::::::::
References	~~() https://www.tenable.com/security/tns-2023-39 -~~	() https://www.tenable.com/security/tns-2023-39 - Vendor Advisory
References	~~() https://www.tenable.com/security/tns-2023-40 -~~	() https://www.tenable.com/security/tns-2023-40 - Vendor Advisory
First Time		Tenable Tenable nessus
CWE		CWE-787
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5

20 Nov 2023, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-11-20 21:15

Updated : 2024-02-28 20:54

NVD link : CVE-2023-6062

Mitre link : CVE-2023-6062

CVE.ORG link : CVE-2023-6062

JSON object : View

Products Affected

tenable

nessus

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2023-6062", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "vulnreport@tenable.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 2.3}]}, "published": "2023-11-20T21:15:08.387", "references": [{"url": "https://www.tenable.com/security/tns-2023-39", "tags": ["Vendor Advisory"], "source": "vulnreport@tenable.com"}, {"url": "https://www.tenable.com/security/tns-2023-40", "tags": ["Vendor Advisory"], "source": "vulnreport@tenable.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. \n\n"}, {"lang": "es", "value": "Existe una vulnerabilidad de escritura de archivos arbitraria donde un atacante remoto autenticado con privilegios de administrador en la aplicaci\u00f3n Nessus podr\u00eda alterar las variables de las reglas de Nessus para sobrescribir archivos arbitrarios en el host remoto, lo que podr\u00eda conducir a una condici\u00f3n de Denegaci\u00f3n de Servicio."}], "lastModified": "2023-11-29T18:01:56.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E52FDAC2-BEB6-4993-8C5B-26FB5E1F8732", "versionEndExcluding": "10.5.7"}, {"criteria": "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "495739A4-94BD-48F8-8C6B-24F7E06F7275", "versionEndExcluding": "10.6.3", "versionStartIncluding": "10.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "vulnreport@tenable.com"}