blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This
    vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE:
    this is disputed by third parties because authentication can be configured. (CVE-2023-26735)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This     vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE:
    this is disputed by third parties because authentication can be configured. (CVE-2023-26735)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
461821	Echo: prometheus-blackbox-exporter: security update to 0.27.0+e1	Tenable Cloud Security	Echo Local Security Checks	Local	high
461821	Echo: prometheus-blackbox-exporter: security update to 0.27.0+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
446598	SCA: security update for github.com/prometheus/blackbox_exporter (GHSA-939c-3g97-vpvv)	Tenable Cloud Security	SCA Checks	Local	high
446598	SCA: security update for github.com/prometheus/blackbox_exporter (GHSA-939c-3g97-vpvv)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
259827	Linux Distros Unpatched Vulnerability : CVE-2023-26735	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2023-26735

high

Tenable Plugins

high

high

high

high

high