Executive brief
Tenable Security Center, a vulnerability management and exposure management platform, was using a predictable method to generate CSRF (Cross-Site Request Forgery) protection tokens. CSRF tokens are security controls that prevent attackers from tricking users into performing unwanted actions on authenticated sessions. With predictable tokens, an attacker could forge requests and potentially trick an authenticated user into performing unintended actions, such as modifying security policies or system configurations.
Technical details
This vulnerability involves weak CSRF token generation in Tenable Security Center, where tokens were generated using a predictable method rather than cryptographically secure randomness. CSRF is an attack vector that requires user interaction (the victim must be authenticated and visit an attacker-controlled page) but no privilege escalation; the attack is network-accessible and does not require authentication to the vulnerable component itself. An attacker can craft a malicious request that, when clicked by an authenticated Security Center user, causes unintended actions to be performed with that user's privileges. The vulnerability has been patched in Security Center version 6.9.0, which improves token randomness and entropy during generation.
Affected products
- Tenable Security Center prior to 6.9.0
Timeline
- 2026-08-14: patched: Security Center 6.9.0 released addressing multiple vulnerabilities including CSRF token generation weakness