Tenable Nessus and Nessus Agent Junction Vulnerability Allowing Arbitrary File Deletion and Potential Code Execution

A vulnerability exists in Tenable Nessus versions 10.11.3 and earlier, as well as Nessus Agent on Windows versions 11.1.2 and earlier. This vulnerability allows an attacker to create a junction that can delete arbitrary files with SYSTEM privileges. Consequently, this could lead to arbitrary code execution, as the attacker might exploit this vulnerability to run malicious code with elevated SYSTEM rights.

Impact

Exploitation of this vulnerability could result in unauthorized deletion of files and execution of malicious code with SYSTEM privileges.

Remediation

Users can upgrade to Tenable Nessus versions 10.11.4 or 10.12.0, or to Nessus Agent version 11.1.3. The installation files are available from the Tenable Downloads Portal.