Vulnerability · Published Nov 5, 2020 · Assigned by tenable

CVE-2020-5793

High 7.8

In plain English

A high-severity security flaw in Tenable Nessus for Windows and Tenable Nessus Agent for Windows. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS NVD)7.8High

Exploit odds (30 days)0.4%top 65.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability in Nessus versions 8.9.0 through 8.12.0 for Windows & Nessus Agent 8.0.0 and 8.1.0 for Windows could allow an authenticated local attacker to copy user-supplied files to a specially constructed path in a specifically named user directory. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. The attacker needs valid credentials on the Windows system to exploit this vulnerability.

Affected products (as reported)

Vendor	Product	Versions
n/a	Tenable Nessus for Windows and Tenable Nessus Agent for Windows	Nessus Agent 8.0.0 and 8.1.0 / Nessus 8.9.0 through Nessus 8.12.0

References

https://www.tenable.com/security/tns-2020-07 x_refsource_MISC
https://www.tenable.com/security/tns-2020-08 x_refsource_MISC