PT-2017-17569 · Tenable · Nessus

Publicado 2017-03-23 · Atualizado 2019-10-03 · CVE-2017-7199

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nessus versions 6.6.2 through 6.10.3

Description The issue is related to insecure permissions, which may allow a local attacker to escalate privileges when the software is running in Agent Mode.

Recommendations For Nessus versions 6.6.2 through 6.10.3, update to version 6.10.4 to fix the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-7199

Produtos afetados

Nessus

Referências · 6

• https://tenable.com/security/tns-2017-08 · Aviso do Fabricante
• https://aspe1337.blogspot.nl/2017/04/writeup-of-cve-2017-7199.html · Nota
• https://osv.dev/vulnerability/CVE-2017-7199 · Aviso do Fabricante
• http://securitytracker.com/id/1038124 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7199 · Nota de Segurança
• http://securityfocus.com/bid/97110 · Nota