PT-2021-2560 · Vmware · Vmware Carbon Black Cloud Workload Appliance

Egor Dimitrenko · Published 2021-04-01 · Updated 2021-04-12 · CVE-2021-21982

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: VMware Carbon Black Cloud Workload appliance versions 1.0.0 through 1.0.1

Description: The issue is related to an authentication bypass vulnerability in the administrative interface of the VMware Carbon Black Cloud Workload appliance. This vulnerability may allow a malicious actor with network access to obtain a valid authentication token, resulting in the ability to view and alter administrative configuration settings. The vulnerability is related to deficiencies in the authentication procedure.

Recommendations: For versions 1.0.0 and 1.0.1, update to a version newer than 1.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2021-01986

CVE-2021-21982

Affected Products

Vmware Carbon Black Cloud Workload Appliance

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2021-21982 · Security Note
• https://vmware.com/security/advisories/VMSA-2021-0005.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21982 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01986 · Security Note
• https://threatpost.com/critical-cloud-bug-vmware-carbon-black/165278 · Note
• https://t.me/ptswarm/19 · Telegram Post
• https://t.me/cvenotify/12758 · Telegram Post
• https://xakep.ru/2021/04/06/vmware-problems · Note
• https://t.me/pentestingnews/101 · Telegram Post
• https://securitylab.ru/vulnerability/517992.php · Note
• https://t.me/thehackernews/1130 · Telegram Post
• https://t.me/cybersecuritytechnologies/3104 · Telegram Post