{"id":"CVE-2018-1154","state":"PUBLISHED","title":"In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultim","description":"In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.","publishedAt":"2018-08-02T19:00:00.000Z","updatedAt":"2024-09-16T17:42:52.205Z","severity":null,"assigner":"tenable","products":["Tenable SecurityCenter"],"affected":[{"vendor":"Tenable","product":"SecurityCenter","versions":[{"version":"All versions prior to 5.7.0","status":"affected"}]}],"references":["https://www.tenable.com/security/tns-2018-11","http://www.securitytracker.com/id/1041431"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:36.861Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/1xxx/CVE-2018-1154.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-1154","state":"PUBLISHED","datePublished":"2018-08-02T19:00:00.000Z","dateUpdated":"2024-09-16T17:42:52.205Z","assignerShortName":"tenable","assignerOrgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateReserved":"2017-12-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue."}],"affected":[{"vendor":"Tenable","product":"SecurityCenter","versions":[{"version":"All versions prior to 5.7.0","status":"affected"}]}],"references":[{"url":"https://www.tenable.com/security/tns-2018-11","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1041431","name":"1041431","tags":["vdb-entry","x_refsource_SECTRACK"]}],"problemTypes":[{"descriptions":[{"description":"Username Enumeration","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"tenable","dateUpdated":"2018-08-12T09:57:01.000Z","orgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be"},"datePublic":"2018-07-31T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vulnreport@tenable.com","DATE_PUBLIC":"2018-07-31T00:00:00","ID":"CVE-2018-1154","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SecurityCenter","version":{"version_data":[{"version_value":"All versions prior to 5.7.0"}]}}]},"vendor_name":"Tenable"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Username Enumeration"}]}]},"references":{"reference_data":[{"name":"https://www.tenable.com/security/tns-2018-11","refsource":"CONFIRM","url":"https://www.tenable.com/security/tns-2018-11"},{"name":"1041431","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1041431"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.tenable.com/security/tns-2018-11","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1041431","name":"1041431","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T03:51:48.873Z"}}]}}}