PT-2017-12059 · Tenable · Nessus

Published 2017-08-09 · Updated 2017-08-24 · CVE-2017-11506

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nessus versions 6.0 through 6.10

Description The issue allows for man-in-the-middle attacks due to the lack of verification of the manager's TLS certificate when making the initial outgoing connection.

Recommendations For Nessus versions 6.0 through 6.10, update to version 6.11 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2017-11506

Affected Products

Nessus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-11506 · Security Note
• https://tenable.com/security/tns-2017-11 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-11506 · Vendor Advisory
• http://securitytracker.com/id/1039141 · Note