CVE-2023-5847

Description

Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

Reserved 2023-10-30 | Published 2023-11-01 | Updated 2024-09-05 | Assigner tenable

Problem types

CWE-269 Improper Privilege Management

Product status

Default status
affected

Any version before 10.6.2
affected

Default status
affected

Any version before 10.4.3
affected

References

www.tenable.com/security/tns-2023-37

www.tenable.com/security/tns-2023-38

cve.org (CVE-2023-5847)

nvd.nist.gov (CVE-2023-5847)

Download JSON