Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-1367

Command Injection Vulnerability in Tenable Security Center

Description

A command injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Security Center application could modify Logging parameters, which could lead to the execution of arbitrary code on the Security Center host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Security Center

Default version status: affected

  • 0 to < 6.3.0affected

References