[NEU] [hoch] Tenable Security Nessus: Mehrere Schwachstellen
Multiple high-severity Tenable Nessus flaws—including RCE, SQLi, and privilege escalation—risk turning your own vulnerability scanner into an attack vector if left unpatched.
Summary written by editorial AI · Source link below
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Tenable Security Nessus ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, SQL-Injection durchzuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
Editorial Analysis
A compromised vulnerability scanner holds credentials and network maps for the entire estate, making these flaws exceptionally dangerous for enterprises relying on Nessus.
Patch all Nessus instances immediately, rotate stored scan credentials, and segment scanner hosts from untrusted networks.
Flaws in the Nessus vulnerability scanner could let attackers leverage our own security tooling for reconnaissance and code execution.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at CERT-Bund (BSI) in a new tab.
More from the Vulnerabilities Desk
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks3d
- QNAP says hackers breaching NAS devices in Plex2Shell attacks3d
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time3d
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen3d
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen3d