Lucene search

K
cvelistTenableCVELIST:CVE-2024-3289
HistoryMay 17, 2024 - 4:50 p.m.

CVE-2024-3289

2024-05-1716:50:48
CWE-281
tenable
raw.githubusercontent.com
7
nessus
directory
permissions
vulnerability
windows
local privilege escalation
non-default installation

0.0004 Low

EPSS

Percentile

8.7%

When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

0.0004 Low

EPSS

Percentile

8.7%

Related for CVELIST:CVE-2024-3289