Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2023-3251

Pass-back vulnerability in Nessus

Description

A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Nessus

Default version status: affected

  • 0 to < 10.6.0affected

References