CVE-2021-20100

EPSS 0.06%
Veröffentlicht 28.06.2021 11:15:07
Zuletzt bearbeitet 21.11.2024 05:45:55
Quelle vulnreport@tenable.com
Teams Watchlist Login
Unerledigt Login

Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Tenable ≫ Nessus Version < 8.2.5

Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.165

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

https://www.tenable.com/security/tns-2021-12

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-20100

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-20100

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-20100

EUVD