Total vulnerabilities in the database
The /server/properties resource in Tenable Web UI before 2.3.5 for Nessus 5.2.3 through 5.2.7 allows remote attackers to obtain sensitive information via the token parameter.
| Software | From | Fixed in |
|---|---|---|
| tenable / nessus | 5.2.5 | 5.2.5.x |
| tenable / web_ui | - | 2.3.4.x |
| tenable / nessus | 5.2.3 | 5.2.3.x |
| tenable / nessus | 5.2.7 | 5.2.7.x |
| tenable / nessus | 5.2.6 | 5.2.6.x |
| tenable / nessus | 5.2.4 | 5.2.4.x |