PT-2017-12059
CVE-2017-11506
·
Published
2017-08-09
·
Updated
2017-08-24
Description by
CVSS 3.1
7.4
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Nessus versions 6.0 through 6.10
Description
The issue allows for man-in-the-middle attacks due to the lack of verification of the manager's TLS certificate when making the initial outgoing connection.
Recommendations
For Nessus versions 6.0 through 6.10, update to version 6.11 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾