Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um seine Privilegien zu erhöhen.
Product
Tenable Nessus Network Monitor ist ein Netzwerküberwachungstool zur Inventarisierung und Überwachung von Netzwerkgeräten und den genutzten Protokollen.
Vulnerabilities 2
-
High 7.8
Improper Access Control leads to Local Privilege Escalation
In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.
-
High 7.0
Improper Access Control leads to Local Priviledge Escalation
When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secur…
Revision history
-
#1
Initiale Fassung
References
-
Tenable Security Advisories vom 2025-05-22
https://de.tenable.com/security/tns-2025-10