CVE-2021-28123: Critical severity cohesity dataplatform vulnerability
Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28123?
CVE-2021-28123 is classified as a critical vulnerability due to the potential for unauthorized access to the system.
How do I fix CVE-2021-28123?
To fix CVE-2021-28123, update Cohesity DataPlatform to version 6.3.1g or newer, 6.4.1d or newer, or 6.5.1c or newer.
What systems are affected by CVE-2021-28123?
CVE-2021-28123 affects Cohesity DataPlatform versions prior to 6.3.1g, 6.4 up to 6.4.1c, and 6.5.1 through 6.5.1b.
What impact does CVE-2021-28123 have on affected systems?
CVE-2021-28123 allows attackers to use a default cryptographic key to gain unauthorized access to the affected Linux system.
Is there a workaround for CVE-2021-28123 if I cannot immediately update?
There are no known workarounds for CVE-2021-28123; upgrading to a patched version is the recommended solution.