Description
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue
References
- 20040326 Nessus stores credentials in plain text mailing-list
- nessus-nessusrc-plaintext-password(15644) vdb-entry
- 1009575 vdb-entry
- 4816 vdb-entry