Vulnerabilities > CVE-2021-20118 - Unspecified vulnerability in Tenable Nessus Agent

CVSS 7.2 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

low complexity

tenable

NVD

Published: 2021-09-09

Updated: 2022-07-12

Summary

Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. This is different than CVE-2021-20117.

Vulnerable Configurations

Part	Description	Count
Application	Tenable Tenable Nessus Agent 6.10.2 Tenable Nessus Agent 6.10.3 Tenable Nessus Agent 6.10.4 Tenable Nessus Agent 6.10.5 Tenable Nessus Agent 6.10.6 Tenable Nessus Agent 6.10.7 Tenable Nessus Agent 6.10.8 Tenable Nessus Agent 6.10.9 Tenable Nessus Agent 6.11.0 Tenable Nessus Agent 6.11.1 Tenable Nessus Agent 6.11.2 Tenable Nessus Agent 6.11.3 Tenable Nessus Agent 7.0.0 Tenable Nessus Agent 7.0.1 Tenable Nessus Agent 7.0.3 Tenable Nessus Agent 7.1.0 Tenable Nessus Agent 7.1.1 Tenable Nessus Agent 7.1.2 Tenable Nessus Agent 7.2.0 Tenable Nessus Agent 7.2.1 Tenable Nessus Agent 7.3.0 Tenable Nessus Agent 7.3.1 Tenable Nessus Agent 7.3.2 Tenable Nessus Agent 7.4.0 Tenable Nessus Agent 7.4.1 Tenable Nessus Agent 7.4.2 Tenable Nessus Agent 7.4.3 Tenable Nessus Agent 7.5.0 Tenable Nessus Agent 7.5.1 Tenable Nessus Agent 7.6.0 Tenable Nessus Agent 7.6.1 Tenable Nessus Agent 7.6.2 Tenable Nessus Agent 7.6.3 Tenable Nessus Agent 7.7.0 Tenable Nessus Agent 8.0.0 Tenable Nessus Agent 8.1.0 Tenable Nessus Agent 8.1.1 Tenable Nessus Agent 8.2.0 Tenable Nessus Agent 8.2.1 Tenable Nessus Agent 8.2.2 Tenable Nessus Agent 8.2.3 Tenable Nessus Agent 8.2.4 Tenable Nessus Agent 8.2.5 Tenable Nessus Agent 8.3.0	44

References

https://www.tenable.com/security/tns-2021-15