CVE-2017-8051 | BDVDB-2026-84518 Detail

Description#

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://vulndb.cyberriskanalytics.com/153135
http://www.tenable.com/security/tns-2017-07
https://www.exploit-db.com/exploits/41892/

Exploit#

https://www.exploit-db.com/exploits/41892/

History#

Version 12017-04-21Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.