Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-1683

DLL Injection in Tenable Identity Exposure Secure Relay

Description

A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Tenable Identity Exposure Secure Relay

Default version status: affected

  • 3.42.17 to < 3.59.4affected

References