1. Home
  2. CVE Database
  3. CVE-2021-21982
CRITICAL · 9.1

CVE-2021-21982

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMwar...

Vulnerability Description

VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
VmwareCarbon Black Cloud Workload<= 1.0.1
LinuxLinux Kernel-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2021-21982?

CVE-2021-21982 is a vulnerability with a CVSS score of 9.1 (CRITICAL). VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMwar...

How severe is CVE-2021-21982?

CVE-2021-21982 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-21982?

Check the references section above for vendor advisories and patch information. Affected products include: Vmware Carbon Black Cloud Workload, Linux Linux Kernel.