CVE-2024-3291

Summary

CVE-2024-3291 is a vulnerability affecting Nessus Agent on Windows hosts. In versions prior to 10.6.4, installing the agent in a non-default directory did not ensue secure permissions for sub-directories. This oversight could potentially allow local privilege escalation if users failed to secure these directories, creating a risk for unauthorized access or system manipulation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.