CVE-2017-11506

CVE-2017-11506 describes a critical vulnerability in Nessus 6.x before version 6.11, where the scanner or agent fails to validate the manager's TLS certificate during the initial connection to Tenable.io or other managers. This oversight creates a window for man-in-the-middle attacks, allowing an attacker to intercept or manipulate communications. With a CVSS score of 7.4 (HIGH), the vulnerability is network-exploitable with high impact on confidentiality and integrity, but requires high attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.