CVE-2023-3251

Summary

CVE-2023-3251 is a newly disclosed vulnerability that affects the Nessus application before version 10.6.0. An authenticated, remote attacker with administrator privileges can exploit this pass-back vulnerability to uncover stored SMTP credentials within the system. This issue poses a significant risk as it allows unauthorized access to email servers, potentially leading to data breaches or unauthorized email sent on behalf of the organization. Successful exploitation of this vulnerability requires advanced privileges, making it a critical concern for organizations using the Nessus application. It is essential to apply the necessary patch or upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.