Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

CVE-2023-2005

What is CVE-2023-2005?

A vulnerability exists in Tenable's products, allowing an authenticated attacker with sufficient permissions on a scan target to exploit a plugin. By placing a binary in a predefined filesystem location, the attacker can escalate their privileges, potentially leading to unauthorized access and control over vulnerable systems. Organizations using Tenable.Io, Nessus, or Security Center should review their deployment versions and apply necessary updates to mitigate this risk.

References