Tenable Nessus Windows Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in Tenable Nessus versions prior to 10.8.4 when installed in a non-default location on Windows. These versions did not apply secure permissions to sub-directories, potentially allowing users to escalate privileges if they had not manually secured the directories in the non-default installation path.

Impact

Exploitation of this vulnerability could lead to unauthorized local privilege escalation on the affected Windows system.

Remediation

Users can upgrade to Tenable Nessus version 10.8.4, which addresses this vulnerability. The installation files are available from the Tenable Downloads Portal.