Vulnerability-Lookup

CVE-2024-3291 (GCVE-0-2024-3291)

Vulnerability from cvelistv5 – Published: 2024-05-17 16:59 – Updated: 2024-08-01 20:05

Title

Privilege Escalation

Summary

When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-18 16:13 UTC

CWE

CWE-281 - Improper Preservation of Permissions

Assigner

tenable mitre root Scorecard

References

1 reference

URL	Tags
https://www.tenable.com/security/tns-2024-09

Impacted products

2 products

Vendor	Product	Version	CPE status
Tenable	Nessus Agent	Affected: 0 , < 10.6.4 (custom)	guessed
tenable	nessus_agent	Affected: 0 , < 10.6.4 (custom) cpe:2.3:a:tenable:nessus_agent::::::::

Date Public

2024-05-16 19:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "nessus_agent",
            "vendor": "tenable",
            "versions": [
              {
                "lessThan": "10.6.4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-18T16:13:59.964924Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-06T17:36:08.388Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T20:05:08.354Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.tenable.com/security/tns-2024-09"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Nessus Agent",
          "vendor": "Tenable",
          "versions": [
            {
              "lessThan": "10.6.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2024-05-16T19:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\nWhen installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.\n\n"
            }
          ],
          "value": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-281",
              "description": "CWE-281 Improper Preservation of Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-17T16:59:56.144Z",
        "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "shortName": "tenable"
      },
      "references": [
        {
          "url": "https://www.tenable.com/security/tns-2024-09"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\nTenable has released Nessus Agent 10.6.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.tenable.com/downloads/nessus-agents\"\u003ehttps://www.tenable.com/downloads/nessus-agents\u003c/a\u003e).\n\n\u003cbr\u003e"
            }
          ],
          "value": "Tenable has released Nessus Agent 10.6.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus-agents )."
        }
      ],
      "source": {
        "advisory": "TNS-2024-09",
        "discovery": "EXTERNAL"
      },
      "title": "Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
    "assignerShortName": "tenable",
    "cveId": "CVE-2024-3291",
    "datePublished": "2024-05-17T16:59:56.144Z",
    "dateReserved": "2024-04-03T21:19:32.010Z",
    "dateUpdated": "2024-08-01T20:05:08.354Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-3291",
      "date": "2026-10-02",
      "epss": "0.00175",
      "percentile": "0.06253"
    },
    "fkie_nvd": {
      "descriptions": [
        {
          "lang": "en",
          "value": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
        },
        {
          "lang": "es",
          "value": " Al instalar Nessus Agent en un directorio fuera de la ubicaci\u00f3n predeterminada en un host de Windows, las versiones de Nessus Agent anteriores a la 10.6.4 no aplicaban permisos seguros para los subdirectorios. Esto podr\u00eda permitir una escalada de privilegios locales si los usuarios no hubieran protegido los directorios en la ubicaci\u00f3n de instalaci\u00f3n no predeterminada."
        }
      ],
      "id": "CVE-2024-3291",
      "lastModified": "2024-11-21T09:29:20.020",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.8,
            "impactScore": 5.9,
            "source": "vulnreport@tenable.com",
            "type": "Secondary"
          }
        ]
      },
      "published": "2024-05-17T17:15:07.740",
      "references": [
        {
          "source": "vulnreport@tenable.com",
          "url": "https://www.tenable.com/security/tns-2024-09"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.tenable.com/security/tns-2024-09"
        }
      ],
      "sourceIdentifier": "vulnreport@tenable.com",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-281"
            }
          ],
          "source": "vulnreport@tenable.com",
          "type": "Secondary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "affected",
                "platforms": [
                  "Windows"
                ],
                "product": "Nessus Agent",
                "vendor": "Tenable",
                "versions": [
                  {
                    "lessThan": "10.6.4",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "vulnreport@tenable.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nessus_agent",
                "vendor": "tenable",
                "versions": [
                  {
                    "lessThan": "10.6.4",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
          },
          {
            "lang": "es",
            "value": " Al instalar Nessus Agent en un directorio fuera de la ubicaci\u00f3n predeterminada en un host de Windows, las versiones de Nessus Agent anteriores a la 10.6.4 no aplicaban permisos seguros para los subdirectorios. Esto podr\u00eda permitir una escalada de privilegios locales si los usuarios no hubieran protegido los directorios en la ubicaci\u00f3n de instalaci\u00f3n no predeterminada."
          }
        ],
        "id": "CVE-2024-3291",
        "lastModified": "2026-06-17T07:43:43.733",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "vulnreport@tenable.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-3291",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-18T16:13:59.964924Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-05-17T17:15:07.740",
        "references": [
          {
            "source": "vulnreport@tenable.com",
            "url": "https://www.tenable.com/security/tns-2024-09"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.tenable.com/security/tns-2024-09"
          }
        ],
        "sourceIdentifier": "vulnreport@tenable.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-281"
              }
            ],
            "source": "vulnreport@tenable.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:36:17+00:00",
      "cve": "CVE-2024-3291",
      "id": "CVE-2024-3291",
      "initial_release_date": "2024-05-16T19:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Privilege Escalation",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-3291.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-01T20:05:08.354Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.tenable.com/security/tns-2024-09"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "nessus_agent",
                "vendor": "tenable",
                "versions": [
                  {
                    "lessThan": "10.6.4",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-3291",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-05-18T16:13:59.964924Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-05-18T16:13:41.672Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "platforms": [
                "Windows"
              ],
              "product": "Nessus Agent",
              "vendor": "Tenable",
              "versions": [
                {
                  "lessThan": "10.6.4",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "datePublic": "2024-05-16T19:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\nWhen installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.\n\n"
                }
              ],
              "value": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-233",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-233 Privilege Escalation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-281",
                  "description": "CWE-281 Improper Preservation of Permissions",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-05-17T16:59:56.144Z",
            "orgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
            "shortName": "tenable"
          },
          "references": [
            {
              "url": "https://www.tenable.com/security/tns-2024-09"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\nTenable has released Nessus Agent 10.6.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.tenable.com/downloads/nessus-agents\"\u003ehttps://www.tenable.com/downloads/nessus-agents\u003c/a\u003e).\n\n\u003cbr\u003e"
                }
              ],
              "value": "Tenable has released Nessus Agent 10.6.4 to address these issues. The installation files can be obtained from the Tenable Downloads Portal ( https://www.tenable.com/downloads/nessus-agents )."
            }
          ],
          "source": {
            "advisory": "TNS-2024-09",
            "discovery": "EXTERNAL"
          },
          "title": "Privilege Escalation",
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "5ac1ecc2-367a-4d16-a0b2-35d495ddd0be",
        "assignerShortName": "tenable",
        "cveId": "CVE-2024-3291",
        "datePublished": "2024-05-17T16:59:56.144Z",
        "dateReserved": "2024-04-03T21:19:32.010Z",
        "dateUpdated": "2024-08-01T20:05:08.354Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-0415

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Tenable. Elles permettent à un attaquant de provoquer une exécution de code arbitraire et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Tenable	Nessus	Nessus versions antérieures à 10.7.3
	Tenable	Nessus Agent	Nessus agent versions antérieures à 10.6.4

References

Title

Publication Time

CERTFR-2024-AVI-0415

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Tenable. Elles permettent à un attaquant de provoquer une exécution de code arbitraire et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Tenable	Nessus	Nessus versions antérieures à 10.7.3
	Tenable	Nessus Agent	Nessus agent versions antérieures à 10.6.4

References

Title

Publication Time

CNVD-2025-18905

Vulnerability from cnvd - Published: 2025-08-18

Title

Tenable Network Security Nessus Agent权限提升漏洞

Description

Tenable Network Security Nessus Agent是 Tenable公司开发的Nessus漏洞扫描工具的组成部分，用于扩展扫描功能至网络中的其他设备。 Tenable Network Security Nessus Agent存在权限提升漏洞，该漏洞源于未能保护非默认安装位置中的目录，攻击者可利用该漏洞导致本地权限升级。

Severity

中

Patch Name

Tenable Network Security Nessus Agent权限提升漏洞的补丁

Patch Description

Tenable Network Security Nessus Agent是 Tenable公司开发的Nessus漏洞扫描工具的组成部分，用于扩展扫描功能至网络中的其他设备。 Tenable Network Security Nessus Agent存在权限提升漏洞，该漏洞源于没有保护非默认安装位置中的目录，攻击者可利用该漏洞导致本地权限升级。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级程序修复该安全问题，详情见厂商官网： https://www.tenable.com/security/tns-2024-09

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-3291

Impacted products

Name
Tenable Network Security Nessus Agent <=10.6.3

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-3291",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-3291"
    }
  },
  "description": "Tenable Network Security Nessus Agent\u662f Tenable\u516c\u53f8\u5f00\u53d1\u7684Nessus\u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u7684\u7ec4\u6210\u90e8\u5206\uff0c\u7528\u4e8e\u6269\u5c55\u626b\u63cf\u529f\u80fd\u81f3\u7f51\u7edc\u4e2d\u7684\u5176\u4ed6\u8bbe\u5907\u3002\n\nTenable Network Security Nessus Agent\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u672a\u80fd\u4fdd\u62a4\u975e\u9ed8\u8ba4\u5b89\u88c5\u4f4d\u7f6e\u4e2d\u7684\u76ee\u5f55\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u672c\u5730\u6743\u9650\u5347\u7ea7\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u7a0b\u5e8f\u4fee\u590d\u8be5\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u89c1\u5382\u5546\u5b98\u7f51\uff1a\r\nhttps://www.tenable.com/security/tns-2024-09",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-18905",
  "openTime": "2025-08-18",
  "patchDescription": "Tenable Network Security Nessus Agent\u662f Tenable\u516c\u53f8\u5f00\u53d1\u7684Nessus\u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u7684\u7ec4\u6210\u90e8\u5206\uff0c\u7528\u4e8e\u6269\u5c55\u626b\u63cf\u529f\u80fd\u81f3\u7f51\u7edc\u4e2d\u7684\u5176\u4ed6\u8bbe\u5907\u3002\r\n\r\nTenable Network Security Nessus Agent\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6ca1\u6709\u4fdd\u62a4\u975e\u9ed8\u8ba4\u5b89\u88c5\u4f4d\u7f6e\u4e2d\u7684\u76ee\u5f55\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u672c\u5730\u6743\u9650\u5347\u7ea7\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Tenable Network Security Nessus Agent\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Tenable Network Security Nessus Agent \u003c=10.6.3"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-3291",
  "serverity": "\u4e2d",
  "submitTime": "2024-05-22",
  "title": "Tenable Network Security Nessus Agent\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

FKIE_CVE-2024-3291

Vulnerability from fkie_nvd - Published: 2024-05-17 17:15 - Updated: 2026-06-17 07:43

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	vulnreport@tenable.com	https://www.tenable.com/security/tns-2024-09
	af854a3a-2127-422b-91ae-364da2661108	https://www.tenable.com/security/tns-2024-09

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows"
          ],
          "product": "Nessus Agent",
          "vendor": "Tenable",
          "versions": [
            {
              "lessThan": "10.6.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "vulnreport@tenable.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "nessus_agent",
          "vendor": "tenable",
          "versions": [
            {
              "lessThan": "10.6.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location."
    },
    {
      "lang": "es",
      "value": " Al instalar Nessus Agent en un directorio fuera de la ubicaci\u00f3n predeterminada en un host de Windows, las versiones de Nessus Agent anteriores a la 10.6.4 no aplicaban permisos seguros para los subdirectorios. Esto podr\u00eda permitir una escalada de privilegios locales si los usuarios no hubieran protegido los directorios en la ubicaci\u00f3n de instalaci\u00f3n no predeterminada."
    }
  ],
  "id": "CVE-2024-3291",
  "lastModified": "2026-06-17T07:43:43.733",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "vulnreport@tenable.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-3291",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-05-18T16:13:59.964924Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-05-17T17:15:07.740",
  "references": [
    {
      "source": "vulnreport@tenable.com",
      "url": "https://www.tenable.com/security/tns-2024-09"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.tenable.com/security/tns-2024-09"
    }
  ],
  "sourceIdentifier": "vulnreport@tenable.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-281"
        }
      ],
      "source": "vulnreport@tenable.com",
      "type": "Secondary"
    }
  ]
}

GHSA-J2M8-8R6C-36X2

Vulnerability from github – Published: 2024-05-17 18:30 – Updated: 2024-05-17 18:30

Details

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-3291"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-281"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-17T17:15:07Z",
    "severity": "HIGH"
  },
  "details": "When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.",
  "id": "GHSA-j2m8-8r6c-36x2",
  "modified": "2024-05-17T18:30:43Z",
  "published": "2024-05-17T18:30:43Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3291"
    },
    {
      "type": "WEB",
      "url": "https://www.tenable.com/security/tns-2024-09"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-3291

Vulnerability from gsd - Updated: 2024-04-11 05:03

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-3291

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-3291"
      ],
      "id": "GSD-2024-3291",
      "modified": "2024-04-11T05:03:27.400922Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-3291",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

WID-SEC-W-2024-1177

Vulnerability from csaf_certbund - Published: 2024-05-16 22:00 - Updated: 2024-05-16 22:00

Summary

Tenable Security Nessus Agent: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Severity

Hoch

Scope

2 vulnerabilities in this advisory, including CVE-2024-3291.

CVE-2024-3291

Es besteht eine Schwachstelle in Tenable Security Nessus Agent. Dieser Fehler tritt bei der Installation in einem anderen Verzeichnis als dem Standardspeicherort auf einem Windows-Host auf, da die Rechte für sichere Unterverzeichnisse nicht erzwungen werden. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um seine Privilegien zu erweitern.

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-3291 (GCVE-0-2024-3291)

CERTFR-2024-AVI-0415

Solution

CERTFR-2024-AVI-0415

Solution

CNVD-2025-18905

FKIE_CVE-2024-3291

GHSA-J2M8-8R6C-36X2

GSD-2024-3291

WID-SEC-W-2024-1177

Tags

Sightings

Nomenclature

Related by attack behaviour