CVSS: 2.1EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2722
https://notcve.org/view.php?id=CVE-2004-2722
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue • http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html http://securitytracker.com/id?1009575 http://www.osvdb.org/4816 https://exchange.xforce.ibmcloud.com/vulnerabilities/15644 • CWE-255: Credentials Management Errors •
CVSS: 3.7EPSS: 0%CPEs: 13EXPL: 0CVE-2004-1445
https://notcve.org/view.php?id=CVE-2004-1445
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges. • http://secunia.com/advisories/12127 http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml http://www.nessus.org/nessus_2_0.html http://www.securityfocus.com/bid/10784 https://exchange.xforce.ibmcloud.com/vulnerabilities/16768 •