Plugin Feed
Monthly
Authenticated Nessus users who hold scan-creation rights can read arbitrary text files on a Linux scanner host at the privilege level of the nessusd service by running a custom Unix compliance audit policy against the scanner itself. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N): confidentiality-only, no write or denial-of-service impact, and reachable only by an account that already holds a valid, low-privileged-but-scan-capable role, making it primarily an insider or compromised-operator risk rather than an unauthenticated remote one. It is tracked at this_month priority - a genuine but moderate issue, not a drop-everything emergency - and no public exploit code was identified at time of analysis; no KEV listing applies.
Authenticated Nessus users who hold scan-creation rights can read arbitrary text files on a Linux scanner host at the privilege level of the nessusd service by running a custom Unix compliance audit policy against the scanner itself. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N): confidentiality-only, no write or denial-of-service impact, and reachable only by an account that already holds a valid, low-privileged-but-scan-capable role, making it primarily an insider or compromised-operator risk rather than an unauthenticated remote one. It is tracked at this_month priority - a genuine but moderate issue, not a drop-everything emergency - and no public exploit code was identified at time of analysis; no KEV listing applies.