Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.
References
| Link | Resource |
|---|---|
| https://www.tenable.com/security/tns-2023-38 | Vendor Advisory |
| https://www.tenable.com/security/tns-2023-37 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Nov 2023, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.tenable.com/security/tns-2023-37 - Vendor Advisory | |
| References | (MISC) https://www.tenable.com/security/tns-2023-38 - Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| CPE | cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:* cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
|
| First Time |
Linux
Tenable nessus Agent Microsoft Microsoft windows Linux linux Kernel Tenable Tenable nessus |
01 Nov 2023, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-01 16:15
Updated : 2023-11-14 18:55
NVD link : CVE-2023-5847
Mitre link : CVE-2023-5847
JSON object : View
Products Affected
tenable
- nessus_agent
- nessus
microsoft
- windows
linux
- linux_kernel
CWE
