The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1935 advisory.

– php: Local privilege escalation via PHP-FPM (CVE-2021-21703)

– php: SSRF bypass in FILTER_VALIDATE_URL (CVE-2021-21705)

Note that Nessus has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More