CVE-2021-20077

—

CVSS 3.1

6.7 medium

EPSS

<1%p28

Published

Mar 19, 2021 (Mar 19, 2021)

Modified

Jun 17, 2026

Description

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.

Vendors: tenable
Products: nessus agent
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.