nessusd_www_server.nbin in the Nessus Web Server plugin 1.2.4 for Nessus allows remote attackers to obtain sensitive information via a request to the /feed method, which reveals the version in a response.
References
Link | Resource |
---|---|
https://discussions.nessus.org/message/7245#7245 | Vendor Advisory |
http://www.securityfocus.com/archive/1/512645/100/0/threaded |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2010-08-10 05:23
Updated : 2018-10-10 13:00
NVD link : CVE-2010-2989
Mitre link : CVE-2010-2989
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
nessus
- web_server_plugin
- nessus