CVE-2023-5847: Privilege Escalation in Nessus

Successful exploitation of CVE-2023-5847 allows a low-privileged attacker to gain higher-level access to the affected system. This could involve gaining system administrator privileges, enabling the attacker to install malware, modify system configurations, steal sensitive data, or disrupt operations. The ability to exploit this during installation or upgrade is particularly concerning, as it could be leveraged to compromise systems before standard security measures are fully in place. The impact is amplified in environments where Nessus is used for vulnerability scanning, as a compromised scanner could provide attackers with valuable information about the network and its defenses.

1. Reserved2023-10-30
2. Published2023-11-01
3. Modified2024-09-05
4. EPSS updated2026-04-02

The primary mitigation for CVE-2023-5847 is to upgrade Nessus to version 10.6.2 or later. Prior to upgrading, it's crucial to back up your Nessus configuration and data to facilitate a rollback if the upgrade process encounters issues. While a direct workaround isn't available, ensure that file uploads during installation and upgrades are carefully scrutinized and validated to prevent malicious file execution. Consider implementing stricter file access controls and integrity checks on the Nessus installation directory to limit the potential impact of a successful exploit. After upgrading, confirm the fix by attempting a clean installation or upgrade and verifying that the crafted file loading exploit is no longer successful.