CVE-2023-5623: Privilege Escalation

Q: What is CVE-2023-5623?

CVE-2023-5623 is a vulnerability that allows a low privileged user to run arbitrary code with SYSTEM privileges on Tenable Nessus Network Monitor version 6.3.0 and earlier.

Q: How does CVE-2023-5623 work?

CVE-2023-5623 occurs when NNM fails to properly set ACLs on its installation directory, allowing a low privileged user to execute arbitrary code with SYSTEM privileges.

Q: What is the severity of CVE-2023-5623?

CVE-2023-5623 has a severity rating of high, with a severity value of 7.

Q: Which software versions are affected by CVE-2023-5623?

Tenable Nessus Network Monitor version 6.3.0 and earlier are affected by CVE-2023-5623.

Q: How can I fix CVE-2023-5623?

To fix CVE-2023-5623, it is recommended to upgrade to a fixed version of Tenable Nessus Network Monitor.

Published Oct 26, 2023

Updated

NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

Affected Software

1 affected component

Tenable Nessus Network Monitor<6.3.0

Remediation

Patch Available

https://www.tenable.com/security/tns-2023-34

Event History

Oct 26, 2023

CVE Published

via MITRE·04:25 PM

Data Sourced

via MITRE·04:25 PM

DescriptionSeverity

May 24, 57290

Event

via FIRST·01:25 AM

Frequently Asked Questions

What is CVE-2023-5623?

CVE-2023-5623 is a vulnerability that allows a low privileged user to run arbitrary code with SYSTEM privileges on Tenable Nessus Network Monitor version 6.3.0 and earlier.

How does CVE-2023-5623 work?