Lucene search

MitreCVE-2021-36921

HistoryAug 12, 2021 - 6:15 p.m.

CVE-2021-36921

2021-08-1218:15:09

CWE-287

mitre

web.nvd.nist.gov

cve-2021-36921

monitorapp

aiwaf

improper authentication

security issue

nvd

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

57.4%

JSON

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.

Affected configurations

Nvd

Node

monitorappapplication_insight_web_application_firewallMatch-

AND

monitorappapplication_insight_managerRangeb107–b115

VendorProductVersionCPE
monitorappapplication_insight_web_application_firewall-cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:*
monitorappapplication_insight_manager*cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
monitorapp	application_insight_web_application_firewall	-	cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:::::::*
monitorapp	application_insight_manager	*	cpe:2.3:a:monitorapp:application_insight_manager::::::::

References

github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md

github.com/monitorapp-aicc/report/wiki/CVE-2021-36921

www.monitorapp.com/waf/

Social References

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

57.4%

JSON

Related for CVE-2021-36921