PT-2021-17233 · Tenable · Tenable.Sc

Published 2021-08-30 · Updated 2021-09-07 · CVE-2021-27018

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Tenable.sc (affected versions not specified)

Description: A flaw was discovered in the certificate validation mechanism, which resulted in improper validation of certificates signed by an internal certificate authority. This issue affects clients configured to use Tenable.sc as the vulnerability data source.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2021-27018

Affected Products

Tenable.Sc

References · 6

• https://cve.org/CVERecord?id=CVE-2021-27018 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-27018 · Vendor Advisory
• https://puppet.com/security/cve/CVE-2021-27018 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-27018 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27018 · Security Note