CVE-2024-12174CWE-295
An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages…
Low · published December 9, 2024
What it is
An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.
The record
Technical detail
- CVSS v3.1
- 2.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00182 · 7.4th percentile
- Weakness
- CWE-295 · Improper Certificate Validation
- Published
- 2024-12-09T21:38Z
EPSS history
Timeline