漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This could allow a malicious actor with sufficient permissions to modify environment variables and abuse an impacted plugin in order to escalate privileges. We have resolved the issue and also made several defense-in-depth fixes alongside. While the probability of successful exploitation is low, Tenable is committed to securing our customers’ environments and our products. The updates have been distributed via the Tenable plugin feed in feed serial numbers equal to or greater than #202212212055.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tenable.Sc 安全漏洞
Vulnerability Description
Tenable Network Security Tenable.Sc是美国Tenable Network Security公司的一套漏洞分析解决方案。该产品支持实时漏洞评估和管理等。 tenable产品存在安全漏洞，该漏洞源于其允许具有足够权限的攻击者修改环境变量并滥用受影响的插件以提升权限。以下产品受到影响：tenable.io、tenable.sc、Nessus。
CVSS Information
N/A
Vulnerability Type
N/A