CVE-2020-5774

Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios

published August 21, 2020

CVSS
—
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios. The lack of proper session expiration could allow attackers with local access to login into an existing browser session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.0th percentile
Published
2020-08-21T12:23Z
EPSS history
Timeline
  • 21 AUG 12:23Z
    Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios
    cvelistv5