CVE-2013-6766: OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authe...

Security readout for executives and security teams

This flaw let an unauthenticated remote party trick OpenVAS Administrator into treating them as authenticated through a crafted version-information request. Because OpenVAS manages vulnerability scanning infrastructure, exposed administrative interfaces could become a control-plane risk. Exposure is likely limited to legacy OpenVAS Administrator deployments in the named vulnerable version ranges, especially where OAP or administrative access is reachable from untrusted networks. Prioritize remediation where legacy OpenVAS management services are reachable by non-administrators or external networks. The issue targets security tooling control infrastructure, but evidence is incomplete on exploitation and severity scoring. Mitigation focus: Upgrade OpenVAS Administrator to 1.2.2, 1.3.2, or later vendor-supported releases.; Restrict OAP and administrative interfaces to trusted management networks only.; Check vendor advisories for any additional operational guidance..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.