CVE-2024-3289

CVE-2024-3289 describes a local privilege escalation vulnerability in Nessus versions prior to 10.7.3 on Windows hosts. When installed to a non-default directory, Nessus failed to enforce secure permissions on sub-directories, allowing a local attacker to potentially gain elevated privileges. This vulnerability has a CVSS score of 7.8 (HIGH), indicating a high impact on confidentiality, integrity, and availability with low attack complexity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.