CVE-2025-24914: Local Priviledge Escalation

Q: What is the severity of CVE-2025-24914?

CVE-2025-24914 has been classified as a high severity vulnerability due to its potential for local privilege escalation.

Q: How do I fix CVE-2025-24914?

To fix CVE-2025-24914, users should upgrade to Nessus version 10.8.4 or higher.

Q: Which versions of Nessus are affected by CVE-2025-24914?

Nessus versions prior to 10.8.4 are affected by CVE-2025-24914.

Q: What kind of vulnerability is CVE-2025-24914?

CVE-2025-24914 is a local privilege escalation vulnerability related to insecure directory permissions.

Q: What platforms are impacted by CVE-2025-24914?

CVE-2025-24914 impacts Nessus installations on Windows hosts that are located in non-default locations.

Published Apr 18, 2025

Updated

When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914

Affected Software

1 affected component

Tenable Nessus<10.8.4

Remediation

Information

Tenable has released Nessus 10.8.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/nessus https://www.tenable.com/downloads/nessus

Event History

Apr 18, 2025

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-24914?

CVE-2025-24914 has been classified as a high severity vulnerability due to its potential for local privilege escalation.

How do I fix CVE-2025-24914?

To fix CVE-2025-24914, users should upgrade to Nessus version 10.8.4 or higher.

Which versions of Nessus are affected by CVE-2025-24914?