CVE-2023-3251

MediumCVSS 4.1

Published: 29/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

36th percentile - higher than 36% of all known CVEs

Summary

A pass-back vulnerability exists in the Nessus application before version 10.6.0, allowing an authenticated remote attacker with administrator privileges to uncover stored SMTP credentials.

Risk Assessment

This vulnerability may lead to the exposure of sensitive data, creating a risk of unauthorized access to systems using those credentials.

Recommendation

It is recommended to update the Nessus application to version 10.6.0 or later to mitigate this vulnerability.

Original NVD description (English source)

A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover stored SMTP credentials within the Nessus application.This issue affects Nessus: before 10.6.0.