CVE-2023-3253 : Security Advisory and Response

This CVE-2023-3253 pertains to an improper authorization vulnerability in Nessus, a product by Tenable. The vulnerability allows an authenticated, low privileged remote attacker to view a list of all users available in the application.

Understanding CVE-2023-3253

This section delves into the details of CVE-2023-3253, including its impact, technical description, affected systems, exploitation mechanism, and mitigation strategies.

What is CVE-2023-3253?

The vulnerability in question is an improper authorization flaw that exists within Nessus, a security product developed by Tenable. It enables authenticated, low privileged remote attackers to access a list of all users within the application, potentially compromising user privacy and security.

The Impact of CVE-2023-3253

With a base score of 4.3 and a medium severity rating, CVE-2023-3253 poses a moderate risk. While the impact on availability is none, there may be low confidentiality impact and no integrity impact. Attackers with low privileges could exploit this vulnerability to gather sensitive information.

Technical Details of CVE-2023-3253

This section provides a deeper dive into the vulnerability, including its description, affected systems and versions, and exploitation mechanism.

Vulnerability Description

The vulnerability stems from improper authorization controls within the Nessus application, allowing unauthorized access to a list of all users in the system. This could lead to a breach of user privacy and potentially further exploitation of sensitive data.

Affected Systems and Versions

The affected platforms include Windows, MacOS, and Linux running Nessus versions less than 10.6.0 with a custom version status.

Exploitation Mechanism

An authenticated, low privileged remote attacker can exploit this vulnerability to gain access to a comprehensive user list within the Nessus application, compromising user privacy and potentially escalating the attack.

Mitigation and Prevention

To address CVE-2023-3253 and mitigate its risks, immediate steps should be taken to secure affected systems and prevent potential exploitation.

Immediate Steps to Take

Tenable has released Nessus version 10.6.0 to address the improper authorization vulnerability. Users are advised to update to the latest version promptly to mitigate the risk of unauthorized user access.

Long-Term Security Practices

In addition to applying patches and updates promptly, organizations should implement robust access control measures, regularly review and audit user permissions, and conduct security awareness training to prevent similar vulnerabilities in the future.

Patching and Updates

Users can obtain the installation files for Nessus 10.6.0 from the Tenable Downloads Portal to ensure their systems are protected against CVE-2023-3253 and other potential security threats.