CVEvulnerability

CVE-2018-1154

8.8 HIGH Published 2018-08-02 Modified 2026-08-17 Official page ↗
Status
Modified
Published
2018-08-02
Last modified
2026-08-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N

Description

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

Affected configurations

• tenable security center (< 5.7.0)

References