Vulnerability in Nessus Plugin Could Allow Privilege Escalation

CVE-2024-2390

What is CVE-2024-2390?

A vulnerability has been identified within a Nessus plugin associated with Tenable's products. This issue enables a malicious actor, who holds sufficient permissions on the scan target, to place a malicious binary in a designated filesystem location. The exploited plugin could then be leveraged to escalate privileges, potentially compromising the integrity of the entire system. Organizations using Nessus should assess their vulnerability management practices to mitigate the risks associated with this issue.

References