CVE-2024-3289

Name of the Vulnerable Software and Affected Versions Nessus versions prior to 10.7.3

Description The issue arises when Nessus is installed to a non-default directory on a Windows host, where it fails to enforce secure permissions for sub-directories. This could potentially allow for local privilege escalation if the directories in the non-default installation location are not properly secured by the users.

Recommendations For Nessus versions prior to 10.7.3, update to version 10.7.3 or later to resolve the issue.