CVE-2017-8051

Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tnsappliancesessionuser parameter, a remote attacker can inject arbitrary commands...

PT-2017-3098

Name of the Vulnerable Software and Affected Versions Tenable Appliance versions 3.5 through 4.4.0 Tenable Appliance versions prior to 3.5 Description The issue is related to a flaw in the simpleupload.py script in the Web UI, which allows a remote attacker to inject arbitrary commands by...