Detections
Analytics

SCA: security update for github.com/cloudflare/cloudflared (GHSA-7mjv-x3jf-545x)

high Tenable Self-Hosted Container Security Plugin ID 412148

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability has been discovered in cloudflared's installer (<= 2023.3.0) for Windows 32-bits devices
 that allows a local attacker with no administrative permissions to escalate their privileges on the
 affected device. This vulnerability exists because the MSI installer used by cloudflared relied on a
 world-writable directory. An attacker with local access to the device (without Administrator rights) can
 use symbolic links to trick the MSI installer into deleting files in locations that the attacker would
 otherwise have no access to. By creating a symlink from the world-writable directory to the target file,
 the attacker can manipulate the MSI installer's repair functionality to delete the target file during the
 repair process. Exploitation of this vulnerability could allow an attacker to delete important system
 files or replace them with malicious files, potentially leading to the affected device being compromised.
 The cloudflared client itself is not affected by this vulnerability, only the installer for 32-bit Windows
 devices. (CVE-2023-1314)

See Also

https://github.com/advisories/GHSA-7mjv-x3jf-545x

Plugin Details

Severity: High

ID: 412148

Version: Revision 1.6

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.58

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2023-1314

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/21/2023

Vulnerability Publication Date: 3/21/2023

Reference Information

CVE: CVE-2023-1314

cwe: CWE-59