PT-2017-17145 · Tenable+1 · Tenable Appliance+3

Publicado 2017-03-08 · Atualizado 2019-10-03 · CVE-2017-6543

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenable Nessus versions prior to 6.10.2 Tenable Appliance versions prior to 4.5.0

Description The issue allows a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system, for example, after a reboot. This issue only affects installations on Windows.

Recommendations For Tenable Nessus versions prior to 6.10.2, update to version 6.10.2 or later to resolve the issue. For Tenable Appliance versions prior to 4.5.0, update to version 4.5.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-6543

Produtos afetados

Nessus

Tenable Appliance

Tenable Nessus

Windows

Referências · 4

• http://tenable.com/security/tns-2017-06 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6543 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6543 · Nota de Segurança
• http://securityfocus.com/bid/96418 · Nota