CVE-2023-3251
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A pass-back vulnerability exists in the Nessus application before version 10.6.0, allowing an authenticated remote attacker with administrator privileges to uncover stored SMTP credentials.
Risk Assessment
This vulnerability may lead to the exposure of sensitive data, creating a risk of unauthorized access to systems using those credentials.
Recommendation
It is recommended to update the Nessus application to version 10.6.0 or later to mitigate this vulnerability.
Other vulnerabilities in Nessus
See all- CVE-2017-11506High
Nessus 6.x before version 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.
- CVE-2017-7850High
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode.
- CVE-2017-7199High
Nessus versions 6.6.2 to 6.10.3 contain a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode.
- CVE-2026-57588Low
A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan result file that, when imported by a privileged user, injects malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
- CVE-2026-57587Medium
A SQL injection vulnerability in Nessus allows a remote, unauthenticated attacker who controls reverse DNS records for a scanned host to inject malicious SQL into the scan results database, potentially enabling exfiltration of scan-result data.
Original NVD description (English source)
A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS