CVSS 3.1 Score 7.8 of 10 (high)


Published May 17, 2024
CWE ID 281


CVE-2024-3291 is a vulnerability that affects Nessus Agent versions prior to 10.6.4 when installed in a directory outside of the default location on a Windows host. The vulnerability arises from the failure to enforce secure permissions for sub-directories in non-default installation locations. This could potentially lead to local privilege escalation if users have not properly secured the directories. The vulnerability has a base severity rating of HIGH, with a base score of 7.8 according to CVSS version 3.1. It poses a risk to organizations due to its potential impact on confidentiality and integrity, with an exploitability score of 1.8 and an impact score of 5.9 respectively. Remediation involves updating Nessus Agent to version 10.6.4 or later, which enforces secure permissions for sub-directories in non-default installation locations.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3291 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options