CVE-2018-1154

CVE-2018-1154

High · published August 2, 2018

CVSS v3.0
8.8
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00679 · 51.8th percentile
Published
2018-08-02T23:29Z
Affected products (1)
ProductVersionsFixed in
tenable/security_center< 5.7.05.7.0
References (4)
http://www.securitytracker.com/id/1041431 · [email protected]https://www.tenable.com/security/tns-2018-11 · [email protected]http://www.securitytracker.com/id/1041431 · af854a3a-2127-422b-91ae-364da2661108https://www.tenable.com/security/tns-2018-11 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 AUG 19:00Z
    In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases…
    cvelistv5