CVE-2018-1154: High severity Tenable SecurityCenter vulnerability

Q: What is CVE-2018-1154?

CVE-2018-1154 is a vulnerability that allows an unauthenticated attacker to automate the discovery of username aliases via brute force, potentially leading to unauthorized access.

Q: What is the severity of CVE-2018-1154?

CVE-2018-1154 has a severity of 8.8 (high).

Q: What is the affected software for CVE-2018-1154?

The affected software for CVE-2018-1154 is Tenable SecurityCenter versions prior to 5.7.0.

Q: How can an attacker exploit CVE-2018-1154?

An attacker can exploit CVE-2018-1154 by performing brute force attacks to automate the discovery of username aliases.

Q: Is there a fix for CVE-2018-1154?

Yes, upgrading to SecurityCenter version 5.7.0 or later will fix CVE-2018-1154.

Published Aug 2, 2018

Updated

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

Affected Software

1 affected component

Tenable SecurityCenter<5.7.0

Remediation

Patch Available

https://www.tenable.com/security/tns-2018-11

Event History

Aug 2, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-1154?

CVE-2018-1154 is a vulnerability that allows an unauthenticated attacker to automate the discovery of username aliases via brute force, potentially leading to unauthorized access.

What is the severity of CVE-2018-1154?

CVE-2018-1154 has a severity of 8.8 (high).

What is the affected software for CVE-2018-1154?