Tenable Nessus Agent Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in Tenable Nessus Agent for Windows, specifically in versions prior to 10.8.3. When installed in a non-default location, these versions failed to apply secure permissions to sub-directories. This oversight could allow users to escalate privileges locally, provided they had not already secured the directories in the chosen installation path.

Impact

Exploitation of this vulnerability could lead to unauthorized local privilege escalation on the affected Windows host.

Remediation

Users can upgrade to Tenable Nessus Agent version 10.8.3, which addresses this vulnerability. The updated version is available for download from the Tenable Downloads Portal.