Description
Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation of the admin password.
References (2)
Core 2
Core References
Permissions Required x_refsource_misc
https://vulndb.cyberriskanalytics.com/153134
Patch, Vendor Advisory x_refsource_confirm
http://www.tenable.com/security/tns-2017-07
Scores
CVSS v3
7.5
EPSS
0.0024
EPSS Percentile
47.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
Status
published
Products (1)
tenable/appliance
< 4.4.0
Published
Apr 21, 2017
Tracked Since
Feb 18, 2026