Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1141

Опубликовано: 20 мар. 2018
Источник: nvd
CVSS3: 7
CVSS2: 4.4
EPSS Низкий

Описание

When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*
Версия до 7.0.3 (исключая)

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 7
github
больше 3 лет назад

When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the installation location.

EPSS

Процентиль: 11%
0.00037
Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-732