ZDI-24-801: Tenable Nessus Network Monitor Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Tenable Nessus Network Monitor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-5622.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-801?
ZDI-24-801 has been assigned a high severity rating due to its potential for privilege escalation.
How do I fix ZDI-24-801?
To fix ZDI-24-801, upgrade to the latest version of Tenable Nessus Network Monitor that addresses this vulnerability.
What types of attacks can ZDI-24-801 enable?
ZDI-24-801 can enable local attackers to escalate privileges on affected installations.
Who is affected by ZDI-24-801?
Organizations using affected versions of Tenable Nessus Network Monitor are at risk from ZDI-24-801.
What is required to exploit ZDI-24-801?
An attacker must first execute low-privileged code on the target system to exploit ZDI-24-801.