PT-2020-18695 · Tenable · Nessus

Nyxgeek · Published 2020-08-21 · Updated 2020-08-28 · CVE-2020-5774

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Nessus versions 8.11.0 and earlier

Description The issue is related to improper session expiration, which could allow attackers with local access to login into an existing browser session.

Recommendations For versions 8.11.0 and earlier, update to a version that properly expires sessions to prevent unauthorized access.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2020-5774

Affected Products

Nessus

References · 3

• https://tenable.com/security/tns-2020-06 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5774 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5774 · Vendor Advisory