Tenable Terrascan versions up to 1.18.3 contain SSRF and path manipulation flaws that could permit an attacker to interact with restricted internal resources.

The application is susceptible to Server-Side Request Forgery (CWE-918) and external control of file names or paths (CWE-73). These vulnerabilities allow an unauthenticated attacker to manipulate how the application interacts with external and internal resources.

Exploitation of these flaws could lead to unauthorized access to internal services or sensitive file reading, undermining the security of the infrastructure analysis process. With a CVSS score of 7.5 (High), this vulnerability poses a substantial threat to the confidentiality and security of the environments where Terrascan is deployed.

Immediate Action: Update Terrascan to the latest version as soon as the vendor releases a patch. In the interim, ensure the application is deployed in a hardened environment with minimal network privileges.

Proactive Monitoring: Use network monitoring tools to detect and block unauthorized or anomalous outbound traffic from the Terrascan service.

Compensating Controls: Deploy a Web Application Firewall (WAF) or equivalent network security policy to restrict the application's ability to reach internal or private network resources.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the remediation of this vulnerability due to its high impact and potential for exploitation. Monitor for official vendor updates and apply them immediately upon release to secure the Terrascan implementation.