CVE-2021-20106

MEDIUM

Nessus < 8.2.5 - Privilege Escalation via Crafted File Upload

Title source: llm
STIX 2.1

Description

Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.tenable.com/security/tns-2021-13

Scores

CVSS v3 6.5
EPSS 0.0030
EPSS Percentile 53.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
tenable/nessus < 8.2.5
Published Jul 21, 2021
Tracked Since Feb 18, 2026