PT-2018-10553 · Tenable · Nessus

Published 2018-03-20 · Updated 2019-10-03 · CVE-2018-1141

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nessus versions prior to 7.0.3

Description The issue arises when Nessus is installed to a directory outside of the default location, where it fails to enforce secure permissions for sub-directories. This could potentially allow for local privilege escalation if users have not properly secured the directories in the installation location.

Recommendations For Nessus versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-1141

Affected Products

Nessus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-1141 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1141 · Vendor Advisory
• https://tenable.com/security/tns-2018-01 · Vendor Advisory
• http://securitytracker.com/id/1040557 · Note