Session Management Flaw in Nessus by Tenable
CVE-2020-5774

7.1HIGH

Key Information:

Vendor

Tenable

Status
Tenable Nessus
Vendor
CVE Published:
21 August 2020

What is CVE-2020-5774?

Nessus versions 8.11.0 and earlier have a session management flaw that allows sessions to persist longer than intended in specific scenarios. This lack of appropriate session expiration can grant unauthorized attackers with local access the ability to hijack existing browser sessions, potentially exposing sensitive data and compromising system integrity.

Affected Version(s)

Tenable Nessus < 8.11.1

References

https://www.tenable.com/security/tns-2020-06
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.