CVE-2021-20106

CVE-2021-20106 affects Tenable Nessus Agent versions 8.2.5 and earlier. Root cause is insufficient validation during file uploads, enabling a Nessus administrator to upload a crafted file that escalates privileges on the Nessus host. Affected component: Nessus Agent (Windows/Linux/macOS as deploy...

Tenable Nessus Agent < 8.3.0 Privilege Escalation Vulnerability (TNS-2021-13)

Tenable Nessus Agent is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenable Nessus Agent <= 8.2.5 Privilege Escalation (TNS-2021-13)

According to its self-reported version, the Tenable Nessus agent running on the remote host is prior or equal to 8.2.5. It is, therefore, affected by a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining...