CVE-2004-2723 NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

LowCVSS 2.1 EPSS 0.31%

Published: 2007-10-07 00:00
Updated: 2026-06-17 01:10
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

Affected products

Product	Affected versions	Fixed in
nessuswx	= 1.4.4	No fix listed

References

20040327 NessusWX stores credentials in plain text mailing-list
1009577 vdb-entry
4814 vdb-entry
9993 vdb-entry
nessuswx-sessionfiles-plaintext-password(15641) vdb-entry

CVSS v2.0

2.1 Low

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.31% (percentile 24.1)
CWE: CWE-255

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.