Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/05/2018 Updated: 20/06/2018

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

In Nessus prior to 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tenable nessus

Nessus versions 703 and earlier have been found vulnerable to two separate issues The first vulnerability (XSS) exists due to improper input validation An authenticated attacker could create and upload a nessus file, that may be viewed by an administrator allowing for the execution of arbitrary script code in a user's browser session In othe ...

CWE-384 https://www.tenable.com/security/tns-2018-05 http://www.securitytracker.com/id/1040918 https://nvd.nist.gov https://www.tenable.com/security/tns-2018-05

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-1148

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect