The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4919 advisory.

  - jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

  - netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (CVE-2021-37136)

  - netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an     unnecessary way (CVE-2021-37137)

  - h2: Remote Code Execution in Console (CVE-2021-42392)

  - netty: control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)

  - xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr (CVE-2022-0084)

  - jboss-client: memory leakage in remote client transaction (CVE-2022-0853)

  - wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security     enabled (CVE-2022-0866)

  - undertow: Double AJP response for 400 from EAP 7 results in CPING failures (CVE-2022-1319)

  - OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)     (CVE-2022-21299)

  - mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network     access via multiple protocols to compromise MySQL Connectors (CVE-2022-21363)

  - h2: Loading of custom classes from remote servers through JNDI (CVE-2022-23221)

  - xerces-j2: infinite loop when handling specially crafted XML document payloads (CVE-2022-23437)

  - artemis-commons: Apache ActiveMQ Artemis DoS (CVE-2022-23913)

  - Moment.js: Path traversal  in moment.locale (CVE-2022-24785)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5559-1 advisory.

  - Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path     traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1,     especially if a user-provided locale string is directly used to switch moment locale. This problem is     patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the     user-provided locale name before passing it to Moment.js. (CVE-2022-24785)

  - moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected     versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date     parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2)     complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k     characters. Users who pass user-provided strings without sanity length checks to moment constructor are     vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected     versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider     limiting date lengths accepted from user input. (CVE-2022-31129)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6277 advisory.

  - golang: encoding/pem: fix stack overflow in Decode (CVE-2022-24675)

  - Moment.js: Path traversal  in moment.locale (CVE-2022-24785)

  - golang: regexp: stack exhaustion via a deeply nested expression (CVE-2022-24921)

  - golang: crypto/elliptic: panic caused by oversized scalar (CVE-2022-28327)

  - golang: syscall: faccessat checks wrong group (CVE-2022-29526)

  - golang: crypto/tls: session tickets lack random ticket_age_add (CVE-2022-30629)

  - moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:4918 advisory.

  - jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)

  - netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (CVE-2021-37136)

  - netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an     unnecessary way (CVE-2021-37137)

  - h2: Remote Code Execution in Console (CVE-2021-42392)

  - netty: control chars in header names may lead to HTTP request smuggling (CVE-2021-43797)

  - xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr (CVE-2022-0084)

  - jboss-client: memory leakage in remote client transaction (CVE-2022-0853)

  - wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security     enabled (CVE-2022-0866)

  - undertow: Double AJP response for 400 from EAP 7 results in CPING failures (CVE-2022-1319)

  - OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)     (CVE-2022-21299)

  - mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network     access via multiple protocols to compromise MySQL Connectors (CVE-2022-21363)

  - h2: Loading of custom classes from remote servers through JNDI (CVE-2022-23221)

  - xerces-j2: infinite loop when handling specially crafted XML document payloads (CVE-2022-23437)

  - artemis-commons: Apache ActiveMQ Artemis DoS (CVE-2022-23913)

  - Moment.js: Path traversal  in moment.locale (CVE-2022-24785)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0076 advisory.

  - Moment.js: Path traversal  in moment.locale (CVE-2022-24785)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Nessus Network Monitor (NNM) installed on the remote host is prior to 6.2.0. It is, therefore, affected by multiple vulnerabilities in third-party software. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues.
Nessus Network Monitor 6.2.0 updates moment.js to version 2.29.4 and handlebars to version 4.7.7 to address the identified vulnerabilities.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6272 advisory.

  - Moment.js: Path traversal  in moment.locale (CVE-2022-24785)

  - moment: inefficient parsing algorithm resulting in DoS (CVE-2022-31129)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3295 advisory.

  - Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path     traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1,     especially if a user-provided locale string is directly used to switch moment locale. This problem is     patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the     user-provided locale name before passing it to Moment.js. (CVE-2022-24785)

  - moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected     versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date     parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2)     complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k     characters. Users who pass user-provided strings without sanity length checks to moment constructor are     vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected     versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider     limiting date lengths accepted from user input. (CVE-2022-31129)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Tenable Nessus application running on the remote host is 10.x prior to 10.3.1. It is, therefore, affected by multiple vulnerabilities, including:

  - A use-after-free vulnerability in the doContent function in xmlparse.c in libexpat. (CVE-2022-40674)

  - A path traversal vulnerability in the locale string handling functionality of Moment.js. (CVE-2022-24785)

  - A denial of service vulnerability in the string-to-date parsing functinality in Moment.js (CVE-2022-31129)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version   number.

ID	Name	Product	Family	Published	Updated	Severity
161910	RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 8 (Moderate) (RHSA-2022:4919)	Nessus	Red Hat Local Security Checks	6/6/2022	1/23/2023	critical
164015	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Moment.js vulnerabilities (USN-5559-1)	Nessus	Ubuntu Local Security Checks	8/10/2022	1/17/2023	high
164615	RHEL 8 : Red Hat OpenShift Service Mesh 2.1.5 (RHSA-2022:6277)	Nessus	Red Hat Local Security Checks	9/1/2022	1/23/2023	high
161911	RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.5 security update on RHEL 7 (Moderate) (RHSA-2022:4918)	Nessus	Red Hat Local Security Checks	6/6/2022	1/23/2023	critical
169920	RHEL 8 : Red Hat Ceph Storage 5.3 security update and Bug Fix (Moderate) (RHSA-2023:0076)	Nessus	Red Hat Local Security Checks	1/11/2023	1/23/2023	high
170688	Nessus Network Monitor < 6.2.0 Multiple Vulnerabilities (TNS-2022-28)	Nessus	Misc.	1/27/2023	1/27/2023	critical
164616	RHEL 8 : Red Hat OpenShift Service Mesh 2.0.11 (RHSA-2022:6272)	Nessus	Red Hat Local Security Checks	9/1/2022	1/23/2023	high
170880	Debian DLA-3295-1 : node-moment - LTS security update	Nessus	Debian Local Security Checks	1/31/2023	1/31/2023	high
166600	Tenable Nessus 10.x < 10.3.1 Multiple Vulnerabilities (TNS-2022-20)	Nessus	Misc.	10/27/2022	2/8/2023	critical

Plugins Search

critical

high

high

critical

high

critical

high

high

critical