Description
On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the scanner host with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Plugin Feed | < 202610282338 | 202610282338 |