CVE-2020-5774

Published: Aug 21, 2020Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios. The lack of proper session expiration could allow attackers with local access to login into an existing browser session.

Affected (1)

Products: Tenable: Nessus

Tenable

1 product

Nessus

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Nessus	Up to 8.11.0

Related CWEs

CWE-613

Insufficient Session Expiration

According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (2)

https://www.tenable.com/security/tns-2020-06

Source: vulnreport@tenable.com

PatchVendor Advisory

https://www.tenable.com/security/tns-2020-06

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.