CVE-2018-1141

Published: Mar 20, 2018Modified: Nov 21, 2024

7.0

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.

Affected (1)

Products: Tenable: Nessus

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Nessus	Before 7.0.3

Related CWEs

Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

References (4)

http://www.securitytracker.com/id/1040557

Source: vulnreport@tenable.com

Third Party AdvisoryVDB Entry

https://www.tenable.com/security/tns-2018-01

Source: vulnreport@tenable.com

Vendor Advisory

http://www.securitytracker.com/id/1040557

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.tenable.com/security/tns-2018-01

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.