PT-2018-10553

CVE-2018-1141

·

Published

2018-03-20

·

Updated

2019-10-03

Description by

CVSS 3.1
7.0
High
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Nessus versions prior to 7.0.3
Description The issue arises when Nessus is installed to a directory outside of the default location, where it fails to enforce secure permissions for sub-directories. This could potentially allow for local privilege escalation if users have not properly secured the directories in the installation location.
Recommendations For Nessus versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾