CVE-2018-1154 Vulnerability Details

  /     /     /  

CVE-2018-1154 Metadata Quick Info

CVE Published: 02/08/2018 | CVE Updated: 16/09/2024 | CVE Year: 2018
Source: tenable | Vendor: Tenable | Product: SecurityCenter
Status : PUBLISHED

---

CVE-2018-1154 Description

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Username Enumeration
Source: Tenable

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).