- Description
- When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914
- Source
- vulnreport@tenable.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- vulnreport@tenable.com
- CWE-276
- Hype score
- Not currently trending
⚠️Actualizaciones de seguridad de Tenable para Nessus ❗CVE-2024-40896 ❗CVE-2025-24928 ❗CVE-2025-24914 ➡️Más info: https://t.co/Krrzmwcmpx https://t.co/sJG3arCLMg
@CERTpy
23 Apr 2025
76 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2025-24914 🔴 HIGH (7.8) 🏢 Tenable - Nessus 🏗️ 0 🔗 https://t.co/o5UgNlYF81 #CyberCron #VulnAlert #InfoSec https://t.co/rwDL3fxpYQ
@cybercronai
20 Apr 2025
19 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes