CVE-2024-3291: Privilege Escalation
When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3291?
CVE-2024-3291 is classified as a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2024-3291?
To fix CVE-2024-3291, upgrade the Nessus Agent to version 10.6.4 or later, ensuring that secure permissions are enforced on directory installation.
Which versions of Nessus Agent are affected by CVE-2024-3291?
Nessus Agent versions prior to 10.6.4 are affected by CVE-2024-3291.
What impact does CVE-2024-3291 have on system security?
CVE-2024-3291 can lead to local privilege escalation, allowing unauthorized users to gain elevated access to the system.
How can I verify if my Nessus Agent is vulnerable to CVE-2024-3291?
You can verify vulnerability to CVE-2024-3291 by checking the version of your Nessus Agent and its installation directory permissions.