Detections
Analytics

SCA: security update for www.velocidex.com/golang/velociraptor (GHSA-7jf5-fvgf-48c6)

medium Tenable Self-Hosted Container Security Plugin ID 412111

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Rapid7 Velociraptor did not properly sanitize the client ID parameter to the CreateCollection API,
 allowing a directory traversal in where the collection task could be written. It was possible to provide a
 client id of "../clients/server" to schedule the collection for the server (as a server artifact), but
 only require privileges to schedule collections on the client. Normally, to schedule an artifact on the
 server, the COLLECT_SERVER permission is required. This permission is normally only granted to
 "administrator" role. Due to this issue, it is sufficient to have the COLLECT_CLIENT privilege, which is
 normally granted to the "investigator" role. To exploit this vulnerability, the attacker must already have
 a Velociraptor user account at least "investigator" level, and be able to authenticate to the GUI and
 issue an API call to the backend. Typically, most users deploy Velociraptor with limited access to a
 trusted group, and most users will already be administrators within the GUI. This issue affects
 Velociraptor versions before 0.6.7-5. Version 0.6.7-5, released January 16, 2023, fixes the issue.
 (CVE-2023-0290)

See Also

https://github.com/advisories/GHSA-7jf5-fvgf-48c6

Plugin Details

Severity: Medium

ID: 412111

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS Score Source: CVE-2023-0290

CVSS v3

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 1/19/2023

Vulnerability Publication Date: 1/18/2023

Reference Information

CVE: CVE-2023-0290

cwe: CWE-22