PT-2017-17569 · Tenable · Nessus

Published 2017-03-23 · Updated 2019-10-03 · CVE-2017-7199

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nessus versions 6.6.2 through 6.10.3

Description The issue is related to insecure permissions, which may allow a local attacker to escalate privileges when the software is running in Agent Mode.

Recommendations For Nessus versions 6.6.2 through 6.10.3, update to version 6.10.4 to fix the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2017-7199

Affected Products

Nessus

References · 6

• https://tenable.com/security/tns-2017-08 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7199 · Security Note
• https://aspe1337.blogspot.nl/2017/04/writeup-of-cve-2017-7199.html · Note
• http://securitytracker.com/id/1038124 · Note
• http://securityfocus.com/bid/97110 · Note