Tenable Network Monitor Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability exists in Tenable Network Monitor versions prior to 6.5.1, when installed in a non-default location on Windows. The application failed to enforce secure permissions for sub-directories, potentially allowing users to escalate privileges if they had not manually secured those directories.

Impact

Exploitation of this vulnerability could lead to unauthorized local privilege escalation, allowing a user to gain elevated rights on the system.

Remediation

Users can upgrade to Tenable Network Monitor version 6.5.1 to address this vulnerability. The installation files are available from the Tenable Downloads Portal.