Privilege Escalation via Binary Placement in Tenable Nessus Plugin
CVE-2023-2005 Published on June 26, 2023
Vulnerability in Tenable Tenable.Io, Tenable Nessus, Tenable Security Center.This issue affects Tenable.Io: before Plugin Feed ID #202306261202 ; Nessus: before Plugin Feed ID #202306261202 ; Security Center: before Plugin Feed ID #202306261202 . This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.
Vulnerability Analysis
CVE-2023-2005 can be exploited with local system access, requires user interaction and user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is a DLL preloading Vulnerability?
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
CVE-2023-2005 has been classified to as a DLL preloading vulnerability or weakness.
Products Associated with CVE-2023-2005
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-2005 are published in these products:
Affected Versions
Tenable.io:- Before Plugin Feed ID #202306261202 is affected.
- Before Plugin Feed ID #202306261202 is affected.
- Before Plugin Feed ID #202306261202 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.