{"id":"CVE-2023-3252","aliases":["EUVD-2023-43928","GHSA-p595-cf69-835h"],"status":"published","title":"Arbitrary File Write","description":"An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00801,"percentile":0.5688,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-427"],"published":"2023-08-29T18:55:09Z","modified":"2026-06-17T06:13:40Z","products":[{"vendor":"tenable","product":"nessus"}],"references":[{"url":"https://www.tenable.com/security/tns-2023-29","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3252"},{"url":"https://github.com/advisories/GHSA-p595-cf69-835h"}],"sources":{"cve":[{"id":"CVE-2023-3252","title":"Arbitrary File Write","description":"\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.\n\n","status":"published","published":"2023-08-29T18:55:09.869Z","modified":"2024-10-28T18:46:39.141Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-43928","description":"\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.\n\n","status":"published","published":"2023-08-29T18:55:09Z","modified":"2024-10-28T18:46:39Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:05:15.649433Z"}],"ghsa":[{"id":"GHSA-p595-cf69-835h","title":"\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with...","description":"\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.\n\n","status":"published","published":"2023-08-29T21:30:21Z","modified":"2024-10-28T21:30:33Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:58:37.515988Z"}],"nvd":[{"id":"CVE-2023-3252","description":"\nAn arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges could alter logging variables to overwrite arbitrary files on the remote host with log data, which could lead to a denial of service condition.\n\n","status":"published","published":"2023-08-29T19:15:27.467Z","modified":"2026-06-17T06:13:40.707Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-427"],"updated_at":"2026-11-02T14:08:25.025396Z"}]}}