[R1] Nessus AMI 8.13.1 Fixes One Vulnerability

Related Vulnerabilities: CVE-2020-5812  

Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

Synopsis

Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

Solution

Tenable has corrected this issue in Nessus AMI 8.13.1, which is now available. The updated AMI can be obtained from the AWS Marketplace (https://aws.amazon.com/marketplace/pp/Tenable-Inc-Nessus-BYOL/B01EHYYYRO).