CVE-2004-2722

Description

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15644

http://www.osvdb.org/4816

http://securitytracker.com/id?1009575

http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS