Tenable Identity Exposure Broken Authorization Vulnerability Allowing Unauthorized File Downloads

A broken authorization vulnerability has been identified in Tenable Identity Exposure versions 3.77.8 and earlier. This vulnerability allows any authenticated user to download IOA script and configuration files, provided the URL for these files is known.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive IOA script and configuration files.

Remediation

Users can upgrade to Tenable Identity Exposure version 3.77.9, which addresses this vulnerability. The installation files are available from the Tenable Downloads Portal.