PT-2004-3613 · Tenable · Nessuswx

Published 2004-12-31 · Updated 2017-07-29 · CVE-2004-2723

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NessusWX version 1.4.4

Description The issue allows local users to obtain passwords because account passwords are stored in plaintext in .session files.

Recommendations For NessusWX version 1.4.4, consider encrypting or securely storing account passwords to prevent unauthorized access. As a temporary workaround, restrict access to .session files to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2004-2723

Affected Products

Nessuswx

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-2723 · Security Note
• http://securitytracker.com/id?1009577 · Note
• http://seclists.org/fulldisclosure/2004/Mar/1343.html · Note
• http://securityfocus.com/bid/9993 · Note
• http://osvdb.org/4814 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15641 · Note