Lucene search

VmwareCVELIST:CVE-2021-21982

HistoryApr 01, 2021 - 6:45 p.m.

CVE-2021-21982

2021-04-0118:45:53

vmware

www.cve.org

vmware carbon black cloud

workload appliance

authentication bypass

vulnerability

network access

administrative interface

authentication token

exploitation

configuration settings

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

55.9%

JSON

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.

CNA Affected

[
  {
    "product": "VMware Carbon Black Cloud Workload appliance",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2021-0005.html