Nessus Agent Vulnerability on Windows Enables Arbitrary Code Execution with SYSTEM Privileges
A newly disclosed security vulnerability in Tenable’s Nessus Agent for Windows could allow attackers to execute malicious code with the highest level of system privileges, raising serious concerns for enterprise security teams relying on the widely-deployed vulnerability assessment platform. The flaw enables a threat actor to create a Windows junction, a type of filesystem symbolic […] The post Nessus Agent Vulnerability on Windows Enables Arbitrary Code Execution with SYSTEM Privileges appeared first on Cyber Security News.
A vulnerability in Tenable's Nessus Agent for Windows allows attackers to execute arbitrary code with SYSTEM privileges, posing a significant threat to enterprise security teams relying on the platform. This flaw enables threat actors to create a Windows junction and potentially escalate their privileges.
Read the full article
This is a curated summary. The complete article is available at Cyber Security News.