Skip to content
OpenAdvisories
High · 7.8 CVE-2024-3289 EUVD-2024-31879GHSA-92vm-p8p9-g4x5

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce se…

Published May 17, 2024 · Updated Aug 1, 2024 · Assigned by tenable

Description

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

Affected products

VendorProductAffectedFixed
Tenable Nessus < 10.7.3 10.7.3

Advisories 1

References