PT-2017-12059 · Tenable · Nessus

Publicado 2017-08-09 · Atualizado 2017-08-24 · CVE-2017-11506

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nessus versions 6.0 through 6.10

Description The issue allows for man-in-the-middle attacks due to the lack of verification of the manager's TLS certificate when making the initial outgoing connection.

Recommendations For Nessus versions 6.0 through 6.10, update to version 6.11 or later to resolve the issue.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2017-11506

Produtos afetados

Nessus

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-11506 · Nota de Segurança
• https://tenable.com/security/tns-2017-11 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-11506 · Aviso do Fabricante
• http://securitytracker.com/id/1039141 · Nota