CVE-2004-2722: Nessus

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue

Affected products

• Nessus Nessus: version 2.0.10a only

Published 2004-12-31. Last modified 2026-06-16.