CVE-2023-6178: 
Tenable Nessus vulnerability analysis and mitigation

An arbitrary file write vulnerability (CVE-2023-6178) was discovered in Nessus Agent versions 10.4.3 and earlier. The vulnerability was disclosed on November 16, 2023, affecting Tenable's Nessus Agent software. This security issue allows an authenticated attacker with privileges on the managing application to alter Nessus Rules variables to overwrite arbitrary files on the remote host (Tenable Advisory).

The vulnerability has been assigned a CVSSv3 Base Score of 6.8 (Medium) with the following vector: AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C. The issue specifically involves the manipulation of Nessus Rules variables that could lead to arbitrary file writes on the remote system. This vulnerability is tracked under Tenable Advisory ID: TNS-2023-41 (Tenable Advisory).

If successfully exploited, this vulnerability could lead to a denial of service condition on the affected system. The attack requires authentication and high privileges on the managing application, which somewhat limits its potential impact (Tenable Advisory, NVD).

Tenable has released Nessus Agent version 10.4.4 to address this vulnerability. Users are advised to upgrade to this version to mitigate the risk. The fix can be obtained from the Tenable Downloads Portal (Tenable Advisory).