Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-2390

Local Privilege Escalation

Description

As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Nessus Agent

Default version status: affected

  • 0 to < #202403142053affected

Tenable Nessus

Default version status: affected

  • 0 to < #202403142053affected

References