Certificate Validation Flaw in Nessus AMI by Tenable

CVE-2020-5812

What is CVE-2020-5812?

A vulnerability exists in Nessus AMI where the application fails to properly validate certificates. This flaw could be exploited by an attacker to impersonate a trusted entity, potentially leading to man-in-the-middle attacks. By leveraging this weakness, malicious actors can intercept, alter, or redirect communication between users and a targeted service without detection, thereby compromising sensitive information.

References