CVE-2024-12174

Tenable / Security Center PUBLISHED

Description (CNA)

An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server.

Affected (CNA)

Vendor / product	Versions
Tenable / Security Center	affected 0 before 6.5.0

CWE

CWE-295

References

https://www.tenable.com/security/tns-2024-19

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.