CVE-2017-11506 | BDVDB-2026-89011 Detail

TenableNessus

Description#

When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the manager's TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tenable.com/security/tns-2017-11
http://www.securitytracker.com/id/1039141

Exploit#

No public exploit known

History#

Version 12017-08-09Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.