7
CVSSv3

CVE-2018-1141

Published: 20/03/2018 Updated: 03/10/2019
CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4
CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1
VMScore: 392
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

When installing Nessus to a directory outside of the default location, Nessus versions before 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.

Vulnerable Product Search on Vulmon Subscribe to Product

tenable nessus

Vendor Advisories

When installing Nessus to a directory outside of the default location, Nessus did not enforce secure permissions for sub-directories on Windows operating systems This could allow for local privilege escalation if users had not secured the directories in the installation location ...