{"id":"CVE-2023-6178","aliases":["EUVD-2023-58428","GHSA-8hj6-r7xc-4vrv"],"status":"published","title":"An arbitrary file write vulnerability exists where an authenticated attacker with privileges on...","description":"An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00826,"percentile":0.57705,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2023-11-20T20:35:55Z","modified":"2026-06-17T06:50:14Z","products":[{"vendor":"tenable","product":"nessus"},{"vendor":"tenable","product":"nessus agent"}],"references":[{"url":"https://www.tenable.com/security/tns-2023-41","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6178"},{"url":"https://github.com/advisories/GHSA-8hj6-r7xc-4vrv"}],"sources":{"cve":[{"id":"CVE-2023-6178","description":"\nAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. \n\n","status":"published","published":"2023-11-20T20:35:55.499Z","modified":"2024-08-02T08:21:17.809Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:25.469654Z"}],"euvd":[{"id":"EUVD-2023-58428","description":"\nAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. \n\n","status":"published","published":"2023-11-20T20:35:55Z","modified":"2024-08-02T08:21:17Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:10.614957Z"}],"ghsa":[{"id":"GHSA-8hj6-r7xc-4vrv","title":"\nAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on...","description":"\nAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. \n\n","status":"published","published":"2023-11-20T21:31:03Z","modified":"2023-12-08T05:05:40Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:55:09.695365Z"}],"nvd":[{"id":"CVE-2023-6178","description":"\nAn arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. \n\n","status":"published","published":"2023-11-20T21:15:08.55Z","modified":"2026-06-17T06:50:14.95Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:08:47.966245Z"}]}}