PT-2023-7204 · Nessus · Nessus

Published 2023-11-16 · Updated 2023-11-29 · CVE-2023-6062

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Nessus (affected versions not specified)

Description The issue is related to an arbitrary file write vulnerability. An authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, potentially leading to a denial of service condition. The vulnerability is also described as being related to an unlimited upload of dangerous file types, which could allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Unrestricted File Upload

Weakness Enumeration

CWE-787

CWE-434

Related Identifiers

BDU:2023-08231

CVE-2023-6062

Affected Products

Nessus

References · 7

• https://osv.dev/vulnerability/CVE-2023-6062 · Vendor Advisory
• https://tenable.com/security/tns-2023-40 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08231 · Security Note
• https://tenable.com/security/tns-2023-39 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6062 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023112059 · Note
• https://vuldb.com/ru/?id.245853 · Note