CVE-2018-1148: Medium severity nessus vulnerability
In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authenticated attacker could maintain system access due to session fixation after a user password change.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1148?
CVE-2018-1148 is a vulnerability in Nessus before version 7.1.0 that allows for session fixation due to insufficient session management within the application.
How does CVE-2018-1148 affect Nessus?
CVE-2018-1148 affects Nessus versions prior to 7.1.0 and allows an authenticated attacker to maintain system access after a user password change.
What is the severity of CVE-2018-1148?
CVE-2018-1148 has a severity rating of 6.5 (Medium).
How can I fix CVE-2018-1148?
To fix CVE-2018-1148, upgrade Nessus to version 7.1.0 or later.
Where can I find more information about CVE-2018-1148?
You can find more information about CVE-2018-1148 at the following references: [SecurityTracker](http://www.securitytracker.com/id/1040918) and [Tenable Security Advisory](https://www.tenable.com/security/tns-2018-05).