CVE-2018-1154

{"id": "CVE-2018-1154", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-08-02T19:29:00.840", "references": [{"url": "http://www.securitytracker.com/id/1041431", "tags": ["Third Party Advisory", "VDB Entry"], "source": "vulnreport@tenable.com"}, {"url": "https://www.tenable.com/security/tns-2018-11", "tags": ["Patch", "Vendor Advisory"], "source": "vulnreport@tenable.com"}, {"url": "http://www.securitytracker.com/id/1041431", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.tenable.com/security/tns-2018-11", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue."}, {"lang": "es", "value": "En SecurityCenter, en versiones anteriores a la 5.7.0, un problema de enumeraci\u00f3n de nombres de usuario puede permitir que un atacante no autenticado automatice el descubrimiento de alias de nombres de usuario mediante fuerza bruta, facilitando en \u00faltima instancia el acceso no autorizado. Se ha unificado la salida de la respuesta del servidor para corregir este problema."}], "lastModified": "2024-11-21T03:59:17.860", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tenable:securitycenter:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56C3DD11-31E9-4FDA-8EAF-C1D774F7A32F", "versionEndExcluding": "5.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "vulnreport@tenable.com"}