Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...

Tenable Security Center Report Charting RCE

Tenable Security Center prior to 6.9.0 allows an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. A report definition's inline style is discarded at render components rehydrate styles from the Style tables by styleID, so th...