CVE-2023-6178

MEDIUM

Nessus < 10.4.4 - Authenticated Arbitrary File Write via Rules Variables

Title source: llm
STIX 2.1

Description

An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.

References (1)

Core 1
Core References

Scores

CVSS v3 6.8
EPSS 0.0009
EPSS Percentile 26.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
tenable/nessus < 10.4.4
Published Nov 20, 2023
Tracked Since Feb 18, 2026