CVE-2021-20077

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the…

published March 19, 2021

CVSS
—
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00346 · 26.9th percentile
Published
2021-03-19T18:46Z
EPSS history
Timeline
  • 19 MAR 18:46Z
    Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the…
    cvelistv5