CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: when installing nessus to a directory outside of the default location, nessus versions prior to 7.0.3 did not enforce secure permissions for sub-directories. this could allow for local privilege escalation if users had not secured the directories in the installation location.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-03-20
Last Modified Date: 2019-10-03