This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Openvas First view 2014-05-19
Product Openvas Administrator Last view 2014-05-19
Version Type Application
Update  
Edition  
Language  
Sofware Edition  
Target Software  
Target Hardware  
Other  

Activity : Overall

COMMON PLATFORM ENUMERATION: Repartition per Version

CPE Name Affected CVE
cpe:2.3:a:openvas:openvas_administrator:1.3:rc1:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.3:beta1:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.3.0:*:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.2:rc1:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.2.1:*:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.3.1:*:*:*:*:*:*:* 1
cpe:2.3:a:openvas:openvas_administrator:1.2.0:*:*:*:*:*:*:* 1

Related : CVE

  Date Alert Description
7.5 2014-05-19 CVE-2013-6766

OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version information, which causes the state to be set to CLIENT_AUTHENTIC.

CWE : Common Weakness Enumeration

%idName
100% (1) CWE-287 Improper Authentication

Nessus® Vulnerability Scanner

id Description
2013-11-15 Name: The remote host is running a security scanner management service that is affe...
File: openvas_manager_administrator_auth_bypass.nasl - Type: ACT_ATTACK