Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue
Name | Vendor | Start Version | End Version |
---|---|---|---|
Nessus | Nessus | 2.0.10a (including) | 2.0.10a (including) |