Authenticated File Read Vulnerability in Nessus Scanner via Unix Compliance Audit

Executive Summary

This vulnerability allows an authenticated, low-privileged Nessus user with scan-creation rights to read arbitrary text files on the scanner host. The files are accessed with the privileges of the nessusd process by running a custom Unix compliance audit against the scanner itself.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by checking for unauthorized access to arbitrary files on the Nessus scanner host. Review Nessus scan logs for custom Unix compliance audits targeting the scanner itself. Look for unusual file read operations or privilege escalation attempts in system logs.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to access sensitive files on the system running the Nessus scanner, potentially leading to unauthorized data exposure or further system compromise.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) and HIPAA (health information privacy).

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict scan-creation rights to only necessary users. Update Nessus to the latest version to apply vendor patches. Monitor for unauthorized file access attempts and review audit logs regularly. Consider disabling custom Unix compliance audits if not required.

Useful 0 Not Useful 0