CVE-2004-2722: Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain...

Security readout for executives and security teams

This CVE describes an old Nessus 2.0.10a issue where account passwords may be stored in plaintext in local .nessusrc files. The business risk is credential exposure to local users on the same system. The record also notes the vendor disputed the issue, so treat exposure as conditional on finding this legacy version and configuration. Exposure is likely limited to systems still running Nessus 2.0.10a with local user access and .nessusrc files containing stored credentials. Modern supported deployments are not confirmed affected by the supplied sources. Prioritize this only if legacy Nessus 2.0.10a remains in use, especially on shared systems. Otherwise, record it as legacy technical debt and confirm current scanner deployments are supported. Mitigation focus: Identify and retire any Nessus 2.0.10a installations.; Check current vendor guidance before assuming a specific patch or fix.; Restrict local access to scanner hosts to trusted administrators only..

Prepared

Jun 29, 2026, 02:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.