← back
CVE-2017-8051

CVE-2017-8051

EPSS 16.5%
Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/41892/unverifiedexploitdbwww.exploit-db.com/exploits/41892unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://vulndb.cyberriskanalytics.com/153135https://www.exploit-db.com/exploits/41892/http://www.tenable.com/security/tns-2017-07