CVE-2021-20079

MEDIUM

Nessus < 8.13.2 - Privilege Escalation via Crafted File Upload

Title source: llm
STIX 2.1

Description

Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/tns-2021-07

Scores

CVSS v3 6.7
EPSS 0.0014
EPSS Percentile 34.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
tenable/nessus < 8.13.2
Published Jun 29, 2021
Tracked Since Feb 18, 2026