CVE-2025-36636 - Improper Access Control

Back Back to CVE browser

MEDIUM

Improper Access Control

Published Oct 8, 2025

4.3

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

Affected products

Vendor Tenable Product Security Center Default
affected
- Version
  0
  Status
  affected
  Constraints
  <6.7.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenable

Security Center

affected

Version	Status	Constraints
0	affected	<6.7.0

Remediation

Vendor solution

Tenable has released Security Center 6.7.0 to address these issues. The installation files can be obtained from the Tenable Downloads Portal: https://www.tenable.com/downloads/security-center

Weaknesses (1)

CWE-284

References (1)

https://docs.tenable.com/release-notes/Content/security-center/2025.htm#670

Link	Providers	Tags
https://docs.tenable.com/release-notes/Content/security-center/2025.htm#670

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner tenable

Published Oct 8, 2025

Updated Oct 9, 2025

Reserved Apr 15, 2025

Link CVE-2025-36636

CISA Vulnrichment

Updated Oct 8, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-36636

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-36636