Potential Zone Bypass in Tenable.sc Scanner Configuration
CVE-2020-5808

7.5HIGH

Key Information:

Vendor

Tenable

Status
Tenable.sc
Vendor
CVE Published:
21 December 2020

What is CVE-2020-5808?

In certain configurations of Tenable.sc versions prior to 5.17.0, a scanner may operate outside the designated user-defined scan zones. This misconfiguration could potentially allow unauthorized scanning of systems beyond specified parameters, leading to unmonitored vulnerabilities. Proper adjustment of the Automatic Distribution settings is essential to ensure scanners only target intended areas.

Affected Version(s)

Tenable.sc All versions prior to 5.17.0

References

https://www.tenable.com/security/tns-2020-11
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.