PT-2024-24952 · Nessus · Nessus

Published 2024-05-17 · Updated 2024-05-17 · CVE-2024-3290

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nessus (affected versions not specified)

Description A race condition issue exists, allowing an authenticated, local attacker on a Windows Nessus host to modify installation parameters during installation. This could potentially lead to the execution of arbitrary code on the Nessus host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2024-3290

Affected Products

Nessus

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2024-3290 · Security Note
• https://tenable.com/security/tns-2024-08 · Note