Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Tenable Nessus Agent 10.6.4 Clear all filters
TI-2024-03087 CVE-2024-3292 · GHSA-xrfx-97x9-43cq

Race condition in Tenable Nessus Agent

Priority LOW 37

A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code o…

CVSS 3.1HIGH 8.2 Local Low privileges User interaction EPSS 0.00169 Published 2024-05-17 Fixed in 10.6.4 CWE-367
TI-2024-03086 CVE-2024-3291 · GHSA-j2m8-8r6c-36x2

Privilege escalation in Tenable Nessus Agent

Priority LOW 35

When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00175 Published 2024-05-17 Fixed in 10.6.4 CWE-281