Medium severity · published Mar 19, 2021
CVE-2021-20077
Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when…
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Nessus Agent · Tenable
7.2.0 before 8.2.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-20077
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-20077
Patch
https://www.tenable.com/security/tns-2021-04-0
Not Applicable
https://www.tenable.com/security/tns-2021-07
More from Nessus Agent
9.1
CVE-2026-15265
Tenable Agent Path Traversal Leading to Remote Code Execution
8.8
CVE-2025-36640
Local Privilege Escalation
7.8
CVE-2026-33694
Junction File Manipulation
7.8
CVE-2025-36632
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege
7.8
CVE-2025-36633
In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrarily delete local system files with SYSTEM privilege,…