CVE-2024-3289

Summary

CVE-2024-3289 is a vulnerability affecting Nessus, a popular vulnerability scanner, on Windows hosts. Before version 10.7.3, Nessus failed to enforce secure permissions for sub-directories when installed in a non-default location. An attacker who gains access to the system could potentially escalate local privileges by exploiting this weakness, if the sub-directories in the non-default installation location are not adequately secured by users. This issue underscores the importance of adhering to the default installation directories and properly securing custom installation locations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.