An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of agent logs and data is present.
References
Link | Resource |
---|---|
https://www.tenable.com/security/tns-2022-21 | Vendor Advisory |
Configurations
Information
Published : 2022-10-31 13:15
Updated : 2022-11-01 11:16
NVD link : CVE-2022-3499
Mitre link : CVE-2022-3499
JSON object : View
CWE
CWE-532
Insertion of Sensitive Information into Log File
Products Affected
tenable
- nessus