CVE-2014-4980

The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:tenable:nessus:5.2.3:*:*:*:*:*:*:*
cpe:2.3:a:tenable:nessus:5.2.4:*:*:*:*:*:*:*
cpe:2.3:a:tenable:nessus:5.2.5:*:*:*:*:*:*:*
cpe:2.3:a:tenable:nessus:5.2.6:*:*:*:*:*:*:*
cpe:2.3:a:tenable:nessus:5.2.7:*:*:*:*:*:*:*
cpe:2.3:a:tenable:web_ui:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-07-23 14:55

Updated : 2024-02-04 18:35


NVD link : CVE-2014-4980

Mitre link : CVE-2014-4980

CVE.ORG link : CVE-2014-4980


JSON object : View

Products Affected

tenable

  • nessus
  • web_ui
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor