ZDI-CAN-21965: ZDI-23-1582: Tenable Nessus Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Tenable Nessus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2023-5847.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-21965?
ZDI-CAN-21965 has been assigned a CVSS rating of 6, indicating a medium severity level.
How do I fix ZDI-CAN-21965?
To mitigate ZDI-CAN-21965, users should update their Tenable Nessus software to the latest version provided by Tenable.
What type of vulnerability is ZDI-CAN-21965?
ZDI-CAN-21965 is a privilege escalation vulnerability that allows local attackers to gain higher privileges on the affected system.
Who is affected by ZDI-CAN-21965?
Organizations using Tenable Nessus installations are at risk if they have not applied the necessary security updates.
Is remote access required to exploit ZDI-CAN-21965?
No, ZDI-CAN-21965 requires the attacker to have local access to execute low-privileged code on the target system.