CVE-2023-6178

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Tenable	Nessus Agent	< 10.4.3

References

https://www.tenable.com/security/tns-2023-41Vendor Advisory
https://www.tenable.com/security/tns-2023-41Vendor Advisory

Timeline

Published: Nov 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-61797.8Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable folder(s). A(n) att CVE-2023-61805.3The tokio-boring library in version 4.0.0 is affected by a memory leak issue that can lead to excessive resource consumption and potential D CVE-2023-61819.8An oversight in BCB handling of reboot reason that allows for persistent code execution CVE-2023-61847.2Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting CVE-2023-61858.8Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitr CVE-2023-61868.8Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in macros without warnin CVE-2023-61878.8The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro CVE-2023-61889.8A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the fi CVE-2023-61895.3Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and export jobs using CVE-2023-61909.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Inf CVE-2023-61919.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egehan Security WebPDKS allows SQL Inj CVE-2023-61935.3quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excess