Improper privilege management (Tenable Security Center)
En bref
- Source
- NVD
- EPSS
- EPSS 0.30 % · centile 23 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- tenable
- Statut NVD
- Modified
Description
An improper privilege management vulnerability exists in Tenable Security Center where an authenticated, remote attacker could view unauthorized objects and launch scans without having the required privileges
Faiblesses (CWE)
- CWE-269 — Gestion incorrecte des privilèges
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L | tenable |
| CVSS 3.1 | MEDIUM 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L | NVD · vulnreport@tenable.com (Secondary) |
| CVSS 3.1 | MEDIUM 6.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2024-46911
- GCVE · GCVE-0-2024-5759
Avis du CERT-FR
- CERTFR-2024-AVI-0475 — Multiples vulnérabilités dans Tenable Security Center · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:a:tenable:security_center:*:*:*:*:*:*:*:*≤ 6.3.0
Produits affectés
| Produit | Versions |
|---|---|
| Tenable · Security Center | affected 0 < 6.4.0 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |