CVE-2021-21982 Auth bypass in VMware Carbon Black Cloud Workload appliance
Attackers with network access can bypass authentication to view and modify administrative settings on the VMware Carbon Black Cloud Workload appliance.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21982?
CVE-2021-21982 is a critical authentication bypass vulnerability in VMware Carbon Black Cloud Workload appliance, published on 1 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.
Weakness: CWE-287
Which versions are affected by CVE-2021-21982?
It affects 1 product.
Products include Vmware Carbon Black Cloud Workload.
How do I fix CVE-2021-21982?
No fix has been published for CVE-2021-21982 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-21982 being exploited?
There is no known exploitation of CVE-2021-21982 in the wild and no public exploit code.
Sources
Also known as GHSA-8rmv-qvj2-587v.