CVE-2021-20106 - Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host · CoreCVE

Back Back to CVE browser

MEDIUM

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host

Published Jul 21, 2021

6.5

MEDIUM

CVSS 3.1

EPSS 1.29%

Description

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.

Affected products

Vendor n/a Product Nessus Agent Default
n/a
- Version
  Nessus Agent 8.2.5 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Nessus Agent

n/a

Version	Status	Constraints
Nessus Agent 8.2.5 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-7563
Advisory
https://www.tenable.com/security/tns-2021-13
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-7563		Advisory
https://www.tenable.com/security/tns-2021-13		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner tenable

Published Jul 21, 2021

Updated Aug 3, 2024

Reserved Dec 17, 2020

Link CVE-2021-20106

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2021-20106

Severity n/a

Public date n/a

Links CVE-2021-20106

Assigner tenable

Published Jul 21, 2021

Updated Aug 3, 2024

Exploited since n/a

Link EUVD-2021-7563