Skip to content
OpenAdvisories
Unscored CVE-2018-1148 EUVD-2018-11786GHSA-2ccr-v9r3-2qmg

In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker co…

Published May 18, 2018 · Updated Sep 17, 2024 · Assigned by tenable

Vendor: Tenable Product: Tenable Nessus

Description

In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change.

Affected products

VendorProductAffectedFixed
Tenable Tenable Nessus All versions prior to 7.1.0 —

References