Web UI Vulnerability in Tenable Appliance 4.4.0 and Earlier
CVE-2017-8050

7.5HIGH

Key Information:

Vendor

Tenable

Status
Appliance
Vendor
CVE Published:
21 April 2017

What is CVE-2017-8050?

Tenable Appliance versions 4.4.0 and earlier exhibit a vulnerability in their Web UI that could enable unauthorized users to manipulate admin passwords. This flaw raises significant security concerns as it compromises the integrity of user authentication, allowing potentially malicious actors access to perform unauthorized administrative actions. Proper awareness and remediation measures are essential to maintain system security.

References

https://vulndb.cyberriskanalytics.com/153134
x_refsource_MISC
http://www.tenable.com/security/tns-2017-07
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.