Remote Code Execution Vulnerability in Tenable.sc by Tenable

CVE-2021-20076

What is CVE-2021-20076?

Certain versions of Tenable.sc, specifically from 5.13.0 to 5.17.0, were found to be vulnerable to a Remote Code Execution (RCE) via insecure unserialization of user inputs. This flaw allows authenticated, unprivileged users to execute arbitrary code on the Tenable.sc server, potentially leading to unauthorized access and system compromise. Organizations using these versions should prioritize updating to secure versions and reviewing server access controls.

References