CVE-2020-5774

—

CVSS 3.1

7.1 high

EPSS

<1%p28

Published

Aug 21, 2020 (Aug 21, 2020)

Modified

Jun 17, 2026

Description

Nessus versions 8.11.0 and earlier were found to maintain sessions longer than the permitted period in certain scenarios. The lack of proper session expiration could allow attackers with local access to login into an existing browser session.

Vendors: tenable
Products: nessus
Weakness: CWE-613
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.