PT-2004-3612 · Tenable · Nessus

Published 2004-12-31 · Updated 2024-08-08 · CVE-2004-2722

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nessus version 2.0.10a

Description The issue concerns the storage of account passwords in plaintext within .nessusrc files. This allows local users to obtain these passwords. It is noted that the vendor has disputed this issue.

Recommendations For Nessus version 2.0.10a, consider restricting access to .nessusrc files to minimize the risk of password exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2004-2722

Affected Products

Nessus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-2722 · Security Note
• http://securitytracker.com/id?1009575 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15644 · Note
• http://osvdb.org/4816 · Note