PT-2021-21408 · Unknown+1 · Monitorapp Application Insight Web Application Firewall+1

Sameer S. Mohite · Published 2021-08-12 · Updated 2021-08-24 · CVE-2021-36921

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AIMANAGER version 2.1.0 before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices

Description The issue allows an attacker to gain administrative access by modifying the response to an authentication check request, due to improper authentication.

Recommendations For AIMANAGER version 2.1.0 before B115, update to a version that includes the B115 patch or later to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-36921

Affected Products

Aimanager

Monitorapp Application Insight Web Application Firewall

References · 5

• 🔥 https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-36921 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36921 · Vendor Advisory
• https://monitorapp.com/waf · Vendor Advisory
• https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md · Note