CVE-2023-0101

Summary

A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or NT AUTHORITY / SYSTEM privileges on the Nessus host.

Affected Software

VendorProductVersion RangeStatus
n/aNessus8.10.1 through 8.15.8, 10.0.0 through 10.4.1affected

Weaknesses

  • Privilege Escalation

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References