PT-2022-22474 · Tenable · Nessus

Justin Laselva · Published 2022-10-31 · Updated 2022-11-01 · CVE-2022-3499

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue allows an authenticated attacker to potentially disclose agent logs and data due to the use of identical agent and cluster node linking keys.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2022-3499

Affected Products

Nessus

References · 3

• https://tenable.com/security/tns-2022-21 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3499 · Security Note