{"cve":{"cve_id":"CVE-2018-1154","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00673,"epss_percentile":0.4947,"epss_as_of":"2026-08-26","description":"In SecurityCenter versions prior to 5.7.0, a username enumeration issue could allow an unauthenticated attacker to automate the discovery of username aliases via brute force, ultimately facilitating unauthorized access. Server response output has been unified to correct this issue.","published_at":"2018-08-02T19:00:00Z","last_modified_at":"2026-08-17T14:50:49.470000Z","cvss_v3_score":8.8,"cvss_v3_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_v3_severity":"HIGH","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":null,"nvd_references":["https://www.tenable.com/security/tns-2018-11","http://www.securitytracker.com/id/1041431"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-08-17T18:39:14.498842Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"A","value_label":"Adjacent"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"tenable","vendor_name":"tenable","product_slug":"security-center","product_name":"Security Center","version_start":null,"version_start_inclusive":null,"version_end":"5.7.0","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:tenable:security_center:*:*:*:*:*:*:*:*"},{"vendor_slug":"tenable","vendor_name":"tenable","product_slug":"securitycenter","product_name":"SecurityCenter","version_start":"All versions prior to 5.7.0","version_start_inclusive":true,"version_end":"All versions prior to 5.7.0","version_end_inclusive":true,"cpe23_uri":"cve5:tenable:securitycenter:All versions prior to 5.7.0:All versions prior to 5.7.0"}],"exploit_refs":[],"news":[],"references":[{"url":"https://www.tenable.com/security/tns-2018-11","source_type":"MISC","tags":[]},{"url":"http://www.securitytracker.com/id/1041431","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2018-08-02T19:00:00Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-08-17T18:39:14.498842Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-17T18:39:14.498842Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-17T18:39:14.498842Z","label":"CVSS score revised","source":"nvd"}]}