Home

CVE-2017-11506

Description

When linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11 does not verify the managers TLS certificate when making the initial outgoing connection. This could allow man-in-the-middle attacks.

Risk Information

Base Score
7.4
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.104

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.0.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.0.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.0.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.1.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.1.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.1.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent (x64) 6.10.0Windows
Multiple Vulnerabilities are affected in Nessus Agent (x64) 6.10.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent (x64) 6.10.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent (x64) 6.10.3Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent (x64) 6.10.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.10.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.10.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.10.7Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.10.8Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.10.9Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.2.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.2.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.3.7Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.4.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.4.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.4.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.4.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.5.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.6.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.6.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199 are affected in Nessus Agent (x64) 6.6.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent (x64) 6.7.0Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent (x64) 6.8.0Windows
Multiple Vulnerabilities are affected in Nessus Agent (x64) 6.8.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent (x64) 6.9.0Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent (x64) 6.9.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-5179,CVE-2017-7199 are affected in Nessus Agent (x64) 6.9.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199 are affected in Nessus Agent (x64) 6.9.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.0.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.0.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.0.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.1.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.1.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.1.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent 6.10.0Windows
Multiple Vulnerabilities are affected in Nessus Agent 6.10.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent 6.10.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent 6.10.3Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7849,CVE-2017-7850 are affected in Nessus Agent 6.10.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.10.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.10.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.10.7Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.10.8Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.10.9Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.2.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.2.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.3.7Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.4.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.4.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.4.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.4.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.1Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.3Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.4Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.5Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.5.6Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.6.0Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.6.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199 are affected in Nessus Agent 6.6.2Windows
Vulnerabilities CVE-2017-11506 are affected in Nessus Agent 6.7.0Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent 6.8.0Windows
Multiple Vulnerabilities are affected in Nessus Agent 6.8.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent 6.9.0Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-7199 are affected in Nessus Agent 6.9.1Windows
Vulnerabilities CVE-2017-11506,CVE-2017-2122,CVE-2017-5179,CVE-2017-7199 are affected in Nessus Agent 6.9.2Windows
Vulnerabilities CVE-2017-11506,CVE-2017-7199 are affected in Nessus Agent 6.9.3Windows
Vulnerabilities CVE-2017-11506 are fixed in Nessus 6.11Windows
Vulnerabilities CVE-2017-11506 are fixed in Tenable Nessus 6.11Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343100Nessus Agent (x64) (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)
PATCH-343099Nessus Agent (10.8.0)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234