{"api_version":"1","generated_at":"2026-04-23T00:40:30+00:00","cve":"CVE-2021-20077","urls":{"html":"https://cve.report/CVE-2021-20077","api":"https://cve.report/api/cve/CVE-2021-20077.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-20077","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-20077"},"summary":{"title":"CVE-2021-20077","description":"Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.","state":"PUBLIC","assigner":"vulnreport@tenable.com","published_at":"2021-03-19 19:15:00","updated_at":"2022-10-28 14:28:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://www.tenable.com/security/tns-2021-04-0","name":"https://www.tenable.com/security/tns-2021-04-0","refsource":"MISC","tags":[],"title":"[R1] Nessus Agent 8.2.3 Fixes Multiple Vulnerabilities - Security Advisory | Tenable®","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.tenable.com/security/tns-2021-07","name":"https://www.tenable.com/security/tns-2021-07","refsource":"CONFIRM","tags":[],"title":"[R1] Nessus 8.14.0 Fixes One Vulnerability - Security Advisory | Tenable®","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20077","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20077","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"20077","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tenable","cpe5":"nessus_agent","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"20077","vulnerable":"1","versionEndIncluding":"8.13.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tenable","cpe5":"nessus_agent","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"20077","vulnerable":"1","versionEndIncluding":"8.2.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tenable","cpe5":"nessus_agent","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2021-20077","ASSIGNER":"vulnreport@tenable.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"Tenable Nessus Agent","version":{"version_data":[{"version_value":"7.2.0 through 8.2.2"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Privilege Escalation"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://www.tenable.com/security/tns-2021-04-0","url":"https://www.tenable.com/security/tns-2021-04-0"},{"refsource":"MISC","name":"https://www.tenable.com/security/tns-2021-07","url":"https://www.tenable.com/security/tns-2021-07"},{"refsource":"CONFIRM","name":"https://www.tenable.com/security/tns-2021-04-0","url":"https://www.tenable.com/security/tns-2021-04-0"}]},"description":{"description_data":[{"lang":"eng","value":"Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token."}]}},"nvd":{"publishedDate":"2021-03-19 19:15:00","lastModifiedDate":"2022-10-28 14:28:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"severity":"HIGH","exploitabilityScore":3.9,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*","versionStartIncluding":"7.2.0","versionEndExcluding":"8.2.3","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"20077","Ordinal":"194066","Title":"CVE-2021-20077","CVE":"CVE-2021-20077","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"20077","Ordinal":"1","NoteData":"Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.","Type":"Description","Title":null},{"CveYear":"2021","CveId":"20077","Ordinal":"2","NoteData":"2021-03-19","Type":"Other","Title":"Published"},{"CveYear":"2021","CveId":"20077","Ordinal":"3","NoteData":"2021-07-01","Type":"Other","Title":"Modified"}]}}}