LDAP Injection Vulnerability in Tenable.sc by Tenable

CVE-2023-0476

What is CVE-2023-0476?

An LDAP injection vulnerability in Tenable.sc arises from inadequate validation of user-supplied input, which can lead to unauthorized manipulation of Active Directory data. An attacker with valid authentication could exploit this flaw to execute commands within the Active Directory environment, potentially leading to data exfiltration or unauthorized access to sensitive information. This issue underscores the critical need for robust input validation mechanisms to prevent such injection attacks. For further details, refer to the official advisory.

References