CVE-2021-28124: Medium severity cohesity dataplatform vulnerability
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28124?
CVE-2021-28124 is considered a high severity vulnerability due to the potential for man-in-the-middle attacks.
How do I fix CVE-2021-28124?
To mitigate CVE-2021-28124, upgrade Cohesity DataPlatform to the latest version that addresses the vulnerability.
What versions are affected by CVE-2021-28124?
CVE-2021-28124 affects Cohesity DataPlatform versions 6.3 up to 6.3.1g, 6.4 up to 6.4.1c, and 6.5.1 through 6.5.1b.
What type of attack is associated with CVE-2021-28124?
CVE-2021-28124 is associated with man-in-the-middle (MITM) attacks that exploit missing server authentication.
Is server authentication present in Cohesity DataPlatform affected by CVE-2021-28124?
No, the impacted versions of Cohesity DataPlatform lack proper server authentication, making them susceptible to MITM attacks.