This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potentially facilitates arbitrary code execution, whereby an attacker may exploit the vulnerability to execute malicious code with elevated SYSTEM privileges.
| Vendor | Product | Versions |
|---|---|---|
| tenable | tenable nessus, tenable nessus agent | Nessus Agent, Nessus |
Updated severity to CRITICAL and corrected exploit availability to false.
Initial creation