CVE-2023-5624: 
Tenable Nessus Network Monitor vulnerability analysis and mitigation

Nessus Network Monitor (NNM) was identified with a security vulnerability tracked as CVE-2023-5624. The vulnerability was discovered and disclosed in October 2023, affecting versions prior to 6.3.0. The issue stems from improper input validation in the application (Tenable Advisory).

The vulnerability is characterized by improper input validation that could potentially allow a blind SQL injection attack. The vulnerability has been assigned a CVSS v3.1 base score of 7.2 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. The weakness has been classified under CWE-20 (Improper Input Validation) (NVD).

If exploited, this vulnerability could allow an admin user to alter parameters that could potentially lead to a blind SQL injection attack. This could potentially compromise the confidentiality, integrity, and availability of the affected system (Tenable Advisory).

Tenable has released Nessus Network Monitor version 6.3.0 to address this vulnerability. Users are advised to upgrade to this version to mitigate the risk. The fix can be obtained from the Tenable Downloads Portal (Tenable Advisory).