Description (CNA)
This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tenable, Inc. / Tenable Nessus, Tenable Nessus Agent | affected Nessus Agent through 11.1.2; affected Nessus through 10.11.3 |
CWE
CWE-59
References
ADP enrichment
No English description supplied.
No references supplied.