CVE-2024-3291

Name of the Vulnerable Software and Affected Versions Nessus Agent versions prior to 10.6.4

Description The issue concerns the installation of Nessus Agent to a non-default directory on a Windows host, where secure permissions for sub-directories were not enforced in versions prior to 10.6.4. This could potentially allow for local privilege escalation if the directories in the non-default installation location were not secured by the users.

Recommendations For Nessus Agent versions prior to 10.6.4, update to version 10.6.4 or later to resolve the issue.