Tenable Nessus Logging Manipulation Vulnerability

A vulnerability exists in Nessus versions prior to 10.8.4, allowing non-authenticated attackers to modify logging entries by manipulating HTTP requests. This issue arises from improper output neutralization for logs, enabling the alteration of log data.

Impact

Exploitation of this vulnerability allows for unauthorized modification of Nessus log entries, potentially leading to misrepresentation of scan results or activity.

Remediation

Users can upgrade to Nessus version 10.8.4, which addresses this vulnerability. The installation files are available from the Tenable Downloads Portal.