A vulnerability was found in Tenable Nessus Professional 10.1.1 (Security Testing Software) and classified as problematic. Affected by this issue is an unknown part of the component nessusd. The manipulation with an unknown input leads to a insufficiently protected credentials vulnerability. Using CWE to declare the problem leads to CWE-522. The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. Impacted is confidentiality. CVE summarizes:

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an attacker to access credentials stored in Nessus scanners, potentially compromising its customers’ network of assets.

The weakness was disclosed 10/18/2022. The advisory is shared for download at cybersecurityworks.com. This vulnerability is handled as CVE-2022-28291 since 03/31/2022. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1552.

It is declared as proof-of-concept. The exploit is available at cybersecurityworks.com.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Productinfo

Type

• Security Testing Software

Vendor

• Tenable

Name

• Nessus Professional

License

• free

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion