CVE-2024-0955: Stored XSS vulnerability

Q: What is the severity of CVE-2024-0955?

CVE-2024-0955 is considered a critical severity vulnerability due to the potential for remote code execution.

Q: How does CVE-2024-0955 affect Tenable Nessus?

CVE-2024-0955 affects Tenable Nessus by allowing authenticated, remote attackers with administrator privileges to execute remote arbitrary scripts.

Q: What versions of Nessus are affected by CVE-2024-0955?

CVE-2024-0955 affects Tenable Nessus versions prior to 10.7.0 exclusively.

Q: How can I remediate CVE-2024-0955?

To remediate CVE-2024-0955, upgrade Tenable Nessus to version 10.7.0 or later.

Q: Who can exploit CVE-2024-0955?

Only authenticated remote attackers with administrator privileges on the Nessus application can exploit CVE-2024-0955.

Published Feb 6, 2024

Updated

A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary scripts.

Affected Software

1 affected component

Tenable Nessus<10.7.0

Remediation

Information

Tenable has released Nessus 10.7.0 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus https://www.tenable.com/downloads/nessus ).

Event History

Feb 6, 2024

CVE Published

via MITRE·11:34 PM

Data Sourced

via MITRE·11:34 PM

RemedyDescriptionSeverityWeakness

Feb 7, 2024

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-0955?

CVE-2024-0955 is considered a critical severity vulnerability due to the potential for remote code execution.

How does CVE-2024-0955 affect Tenable Nessus?

CVE-2024-0955 affects Tenable Nessus by allowing authenticated, remote attackers with administrator privileges to execute remote arbitrary scripts.

What versions of Nessus are affected by CVE-2024-0955?