#VU201 Cross-site scripting in Tenable Nessus in Tenable Nessus - CVE-2016-1000028
Published: July 22, 2016
Vulnerability identifier: #VU201
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U/U:Amber
CVE-ID: CVE-2016-1000028
CWE-ID: CWE-79
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Tenable Nessus
Tenable Nessus
Software vendor:
Tenable Network Security
Tenable Network Security
Description
The vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.
The vulnerability exists due to improper filtering of HTML code from user-supplied input. A remote authenticated user can cause arbitrary scripting code execution by the target authenticated user's browser. The code will originate from the site running the Tenable Nessus software. As a result, the code will be able to access the target user's cookies, associated with the site, access data recently submitted by the target user via web form to the site, or take actions on the site acting as the target user.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
The vulnerability exists due to improper filtering of HTML code from user-supplied input. A remote authenticated user can cause arbitrary scripting code execution by the target authenticated user's browser. The code will originate from the site running the Tenable Nessus software. As a result, the code will be able to access the target user's cookies, associated with the site, access data recently submitted by the target user via web form to the site, or take actions on the site acting as the target user.
Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.
Remediation
The vendor has issued a fix (6.8).