PT-2018-10562 · Tenable · Tenable Appliance

Publicado 2018-03-28 · Atualizado 2018-04-19 · CVE-2018-1142

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tenable Appliance versions 4.6.1 and earlier

Description The issue allows an authenticated attacker to potentially execute arbitrary JavaScript code by manipulating certain URL parameters related to offline plugins, using a specially crafted request.

Recommendations For versions 4.6.1 and earlier, update to a version later than 4.6.1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1142

Produtos afetados

Tenable Appliance

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-1142 · Nota de Segurança
• https://tenable.com/security/tns-2018-02 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1142 · Aviso do Fabricante