CVE-2021-21982: Critical severity vmware carbon black cloud vulnerability
VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21982?
CVE-2021-21982 is considered a critical vulnerability with a high potential for exploitation due to authentication bypass.
How do I fix CVE-2021-21982?
To mitigate CVE-2021-21982, upgrade your VMware Carbon Black Cloud Workload appliance to version 1.0.2 or later.
What are the affected versions for CVE-2021-21982?
CVE-2021-21982 affects VMware Carbon Black Cloud Workload appliance versions 1.0.0 and 1.0.1.
Who is impacted by CVE-2021-21982?
Organizations using VMware Carbon Black Cloud Workload appliance versions 1.0.0 and 1.0.1 are at risk of CVE-2021-21982.
What does CVE-2021-21982 exploit in the VMware Carbon Black Cloud?
CVE-2021-21982 exploits an authentication bypass vulnerability that allows unauthorized access to the administrative interface.