CVE-2021-36921 Auth bypass in n/a
Attackers can gain administrative access to AIWAF devices by modifying authentication response packets, requiring an upgrade to version B115.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-36921?
CVE-2021-36921 is a high-severity authentication bypass vulnerability in n/a, published on 12 Aug 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
Weakness: CWE-287
Which versions are affected by CVE-2021-36921?
It affects 1 product.
Products include Monitorapp Application Insight Manager.
How do I fix CVE-2021-36921?
No fix has been published for CVE-2021-36921 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-36921 being exploited?
There is no known exploitation of CVE-2021-36921 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-fj8v-w5xg-jhc7.