TI-2017-04888 Aliases CVE-2017-7199 GHSA-vc6r-g533-p3rq

Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a…

LOW 34CWE-732Published 2017-03-23 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privileges when the software is running in Agent Mode. Version 6.10.4 fixes this issue.

Why it matters now

EPSS 0.00356 29th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPE	Versions	Role	Vendor
cpe:2.3:a:tenable:nessus:6.6.2:::::::*	6.6.2	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.7:::::::*	6.7	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.8.0:::::::*	6.8.0	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.8.1:::::::*	6.8.1	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.9.0:::::::*	6.9.0	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.9.1:::::::*	6.9.1	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.9.2:::::::*	6.9.2	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.9.3:::::::*	6.9.3	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.10.0:::::::*	6.10.0	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.10.1:::::::*	6.10.1	Vulnerable	Tenable

cpe:2.3:a:tenable:nessus:6.6.2:*:*:*:*:*:*:* Versions 6.6.2 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.8.0:*:*:*:*:*:*:* Versions 6.8.0 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.8.1:*:*:*:*:*:*:* Versions 6.8.1 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.9.0:*:*:*:*:*:*:* Versions 6.9.0 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.9.1:*:*:*:*:*:*:* Versions 6.9.1 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.9.2:*:*:*:*:*:*:* Versions 6.9.2 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.9.3:*:*:*:*:*:*:* Versions 6.9.3 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.10.0:*:*:*:*:*:*:* Versions 6.10.0 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.10.1:*:*:*:*:*:*:* Versions 6.10.1 Vulnerable ·Tenable

Show 2 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:tenable:nessus:6.10.2:::::::*	6.10.2	Vulnerable	Tenable
cpe:2.3:a:tenable:nessus:6.10.3:::::::*	6.10.3	Vulnerable	Tenable

cpe:2.3:a:tenable:nessus:6.10.2:*:*:*:*:*:*:* Versions 6.10.2 Vulnerable ·Tenable
cpe:2.3:a:tenable:nessus:6.10.3:*:*:*:*:*:*:* Versions 6.10.3 Vulnerable ·Tenable

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-7199
2026-10-03 Alias added: GHSA-vc6r-g533-p3rq

References

Advisory 1

https://www.tenable.com/security/tns-2017-08

Other 1

https://aspe1337.blogspot.nl/2017/04/writeup-of-cve-2017-7199.html

TI-2022-00687 Infinite loop in BN_mod_sqrt() reachable when parsing certificates CVSS 3.1HIGH 7.5
TI-2021-20962 In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the… CVSS 3.1HIGH 8.8
TI-2021-21076 In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. CVSS 3.1HIGH 8.1
TI-2021-02413 NULL pointer deref in signature_algorithms processing CVSS 3.1MEDIUM 5.9
TI-2021-02414 CA certificate check bypass with X509_V_FLAG_X509_STRICT CVSS 3.1HIGH 7.4
TI-2022-07855 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for… CVSS 3.1CRITICAL 9.8

See all 67 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences