{"affected":[{"affectedData":[{"defaultStatus":"affected","platforms":["Windows"],"product":"Tenable Identity Exposure Secure Relay","vendor":"Tenable","versions":[{"lessThan":"3.59.4","status":"affected","version":"3.42.17","versionType":"3.59.4"}]}],"source":"vulnreport@tenable.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:tenable:identity_exposure:*:*:*:*:*:*:*:*","matchCriteriaId":"41048D01-1264-4CB2-972C-276B47FAA192","versionEndExcluding":"3.59.4","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nA DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services.\n\n"},{"lang":"es","value":"Existe una vulnerabilidad de inyección de DLL en la que un atacante local autenticado y con pocos privilegios podría modificar archivos de aplicaciones en el host TIE Secure Relay, lo que podría permitir la anulación de la configuración y la ejecución de nuevos servicios de Secure Relay."}],"id":"CVE-2024-1683","lastModified":"2026-06-17T07:04:47.110","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.0,"impactScore":4.7,"source":"vulnreport@tenable.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L","version":"3.1"},"exploitabilityScore":2.0,"impactScore":4.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1683","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-02-23T22:32:47.553771Z","version":"2.0.3"}}]},"published":"2024-02-23T01:15:52.700","references":[{"source":"vulnreport@tenable.com","tags":["Third Party Advisory"],"url":"https://www.tenable.com/security/tns-2024-03"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.tenable.com/security/tns-2024-03"}],"sourceIdentifier":"vulnreport@tenable.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"vulnreport@tenable.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-78"}],"source":"nvd@nist.gov","type":"Primary"}]}