CVE-2023-0476

Published: 2023-01-26T21:18Z

Last Modified: 2025-04-01T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning it to users. An authenticated attacker could generate data in Active Directory using the application account through blind LDAP injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt