CVE-2024-2390CWE-269

Local Privilege Escalation

High · published March 18, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported. This vulnerability could allow a malicious actor with sufficient permissions on a scan target to place a binary in a specific filesystem location, and abuse the impacted plugin in order to escalate privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-03-18T15:37Z
EPSS history
Timeline
  • 18 MAR 15:37Z
    Local Privilege Escalation
    cvelistv5