CVE-2023-5847: High severity nessus vulnerability
Published Nov 1, 2023
·Updated
Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.
Affected Software
4 affected components
All of the following
Any of the following
Tenable Nessus<10.6.2
Tenable Nessus Agent<10.4.3
Any of the following
Linux Linux kernel
Microsoft Windows
Event History
Nov 1, 2023
CVE Published
via MITRE·03:30 PM
Data Sourced
via MITRE·03:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-5847?
CVE-2023-5847 is a vulnerability that allows an attacker to escalate privileges on Windows and Linux hosts during installation or upgrade.
2
What is the severity of CVE-2023-5847?
CVE-2023-5847 has a severity score of 7.3, which is classified as high.
3
Which software is affected by CVE-2023-5847?
The vulnerability affects Tenable Nessus versions up to 10.6.2 and Tenable Nessus Agent versions up to 10.4.3.
4
How can an attacker exploit CVE-2023-5847?
An attacker can exploit CVE-2023-5847 by loading a specially crafted file during the installation or upgrade process.
5
Are Windows and Linux vulnerable to CVE-2023-5847?
Windows and Linux hosts are vulnerable to CVE-2023-5847, but the Linux kernel and Microsoft Windows themselves are not vulnerable.