Description
When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Network Monitor | < 6.5.1 | 6.5.1 |
Advisories 1
- WID-SEC-2025-1136 Tenable Security Nessus Network Monitor: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · May 22, 2025