PT-2021-13780 · Tenable · Nessus Agent

Published 2021-09-09 · Updated 2022-07-12 · CVE-2021-20117

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Nessus Agent versions 8.3.0 and earlier

Description: A local privilege escalation issue was discovered, allowing an authenticated, local administrator to execute specific executables on the host.

Recommendations: For Nessus Agent versions 8.3.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-20117

Affected Products

Nessus Agent

References · 7

• https://tenable.com/security/tns-2021-15 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-20117 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20117 · Security Note
• https://t.me/cvenotify/21111 · Telegram Post
• https://t.me/cibsecurity/28570 · Telegram Post
• https://t.me/cvenotify/21112 · Telegram Post
• https://t.me/cibsecurity/28581 · Telegram Post