VULNERABILITY INTELLIGENCE

CVE-2018-1154

CVSS score8.8 HIGH

EPSS probability0.68%

CISA KEVNot currently listed

Published2018-08-02

Last modified2026-08-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.

Primary references

vulnreport@tenable.com — Third Party Advisory, VDB Entry
vulnreport@tenable.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory