Tenable Nessus Agent Weak File Permissions Vulnerability on Windows Hosts Allowing Denial-of-Service

A vulnerability exists in Tenable Nessus Agent versions 11.1.0 to 11.1.1 and 11.0.3 and earlier, due to weak file permissions in the agent directory on Windows. This flaw could enable unauthorized access, potentially leading to Denial-of-Service (DoS) attacks.

Impact

Exploitation of this vulnerability could cause a Denial-of-Service condition, disrupting the normal functioning of the affected system or application.

Remediation

Users can upgrade to Tenable Nessus Agent versions 11.0.4 or 11.1.2 to address this vulnerability. The installation files are available from the Tenable Downloads Portal.