Local Privilege Escalation in Nessus Agent by Tenable

CVE-2021-20117

What is CVE-2021-20117?

The Nessus Agent, prior to version 8.3.0, contains a vulnerability that allows an authenticated local administrator to execute specific programs on the host system. This flaw poses a risk of unauthorized privilege escalation, potentially allowing malicious users with local access to exploit these capabilities and execute unwarranted actions. It is important for users of Nessus Agent to apply necessary patches and updates to safeguard their systems.

References