VULNERABILITY INTELLIGENCE

CVE-2022-4313

CVSS score8.8 HIGH
EPSS probability1.24%
CISA KEVNot currently listed
Published2023-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets.

Weakness classification

  • CWE-427: Uncontrolled Search Path Element

Primary references