Test ID:	1.3.6.1.4.1.25623.1.0.118438
Category:	General
Title:	Tenable Nessus Network Monitor < 6.1.0 Multiple Vulnerabilities (TNS-2022-19)
Summary:	Tenable Nessus Network Monitor is prone to multiple vulnerabilities.
Description:	Summary: Tenable Nessus Network Monitor is prone to multiple vulnerabilities. Vulnerability Insight: Several third-party components (OpenSSL and moment.js) were found to contain vulnerabilities, and updated versions have been made available by the providers. Nessus Network Monitor 6.1.0 updates OpenSSL to version 3.0.5 and moment.js to 2.29.4 to address the identified vulnerabilities. Affected Software/OS: Tenable Nessus Network Monitor prior to version 6.1.0. Solution: Update to version 6.1.0 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1292 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=548d3f280a6e737673f5b61fce24bb100108dfeb https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011 https://security.netapp.com/advisory/ntap-20220602-0009/ https://www.openssl.org/news/secadv/20220503.txt Debian Security Information: DSA-5139 (Google Search) https://www.debian.org/security/2022/dsa-5139 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/ https://security.gentoo.org/glsa/202210-02 https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf https://www.oracle.com/security-alerts/cpujul2022.html https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html Common Vulnerability Exposure (CVE) ID: CVE-2022-2068 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2c9c35870601b4a44d86ddbf512b38df38285cfa https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9639817dac8bbbaa64d09efad7464ccc405527c7 https://www.openssl.org/news/secadv/20220621.txt Debian Security Information: DSA-5169 (Google Search) https://www.debian.org/security/2022/dsa-5169 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/ Common Vulnerability Exposure (CVE) ID: CVE-2022-2097 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=919925673d6c9cfed3c1085497f5dfbbed5fc431 https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=a98f339ddd7e8f487d6e0088d4a9a42324885a93 https://www.openssl.org/news/secadv/20220705.txt Debian Security Information: DSA-5343 (Google Search) https://www.debian.org/security/2023/dsa-5343 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/V6567JERRHHJW2GNGJGKDRNHR7SNPZK7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R6CK57NBQFTPUMXAPJURCGXUYT76NQAK/ https://lists.debian.org/debian-lts-announce/2023/02/msg00019.html Common Vulnerability Exposure (CVE) ID: CVE-2022-31129 https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O/ https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3 https://github.com/moment/moment/pull/6015#issuecomment-1152961973 https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633/ https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.