Nessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate, a certificate which could allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.
The product does not validate, or incorrectly validates, a certificate.
Link | Tags |
---|---|
https://www.tenable.com/security/tns-2021-01 | third party advisory |