CVE-2021-20099

2021-06-2810:29:13

tenable

www.cve.org

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20100.

CNA Affected

[
  {
    "product": "Nessus Agent",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Nessus Agent 8.2.4 and earlier"
      }
    ]
  }
]

References

www.tenable.com/security/tns-2021-12