CVE-2021-20077 | BDVDB-2026-150670 Detail

Tenable Nessus Agent

Description#

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.tenable.com/security/tns-2021-04-0
https://www.tenable.com/security/tns-2021-07

Exploit#

No public exploit known

History#

Version 12021-03-19Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.