5.3Media

CVE-2026-19636Insuffucient Protections Lead to Brute Force

Tenable, Inc. Security Center Publicada: (hace 3 meses)

Descripción

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

Debilidad (CWE): CWE-1270

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Tenable, Inc. Security Center < 6.9.0

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:tenable:security_center:*:*:*:*:*:*:*:* < 6.9.0