VULNERABILITY INTELLIGENCE
CVE-2021-20077
CVSS score6.7 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2021-03-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- vulnreport@tenable.com — Patch, Vendor Advisory
- vulnreport@tenable.com — Patch, Vendor Advisory
- vulnreport@tenable.com — Patch, Vendor Advisory
- vulnreport@tenable.com — Patch, Vendor Advisory
- vulnreport@tenable.com — Not Applicable, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory