CVE-2023-3251: Pass-back vulnerability in Nessus

Q: What is CVE-2023-3251?

CVE-2023-3251 is a pass-back vulnerability in the Nessus application where an authenticated remote attacker with administrator privileges can uncover stored SMTP credentials.

Q: How can an attacker exploit CVE-2023-3251?

An authenticated remote attacker with administrator privileges can exploit CVE-2023-3251 to uncover stored SMTP credentials within the Nessus application.

Q: What is the severity of CVE-2023-3251?

The severity of CVE-2023-3251 is medium with a CVSS score of 4.1.

Q: Which software is affected by CVE-2023-3251?

The Nessus application before version 10.6.0 is affected by CVE-2023-3251.

Q: How do I fix CVE-2023-3251?

To fix CVE-2023-3251, upgrade your Nessus application to version 10.6.0 or newer.

Published Aug 29, 2023

Updated

A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.

Affected Software

1 affected component

Tenable Nessus<10.6.0

Remediation

Information

Tenable has released Nessus 10.6.0 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus https://www.tenable.com/downloads/nessus ).

Event History

Aug 29, 2023

CVE Published

via MITRE·06:38 PM

Data Sourced

via MITRE·06:38 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-3251?

CVE-2023-3251 is a pass-back vulnerability in the Nessus application where an authenticated remote attacker with administrator privileges can uncover stored SMTP credentials.

How can an attacker exploit CVE-2023-3251?

An authenticated remote attacker with administrator privileges can exploit CVE-2023-3251 to uncover stored SMTP credentials within the Nessus application.

What is the severity of CVE-2023-3251?