Lucene search
VMwareVMSA-2021-0005HistoryApr 01, 2021 - 12:00 a.m.
VMware Carbon Black Cloud Workload appliance update addresses incorrect URL handling vulnerability (CVE-2021-21982)
2021-04-0100:00:00
www.vmware.com
37
vmware
carbon black cloud
workload
update
url handling
vulnerability
cve-2021-21982
authentication
severity
cvssv3
software
EPSS
0.002
Percentile
55.9%
3. Advisory Details
A URL on the administrative interface of the VMware Carbon Black Cloud Workload appliance can be manipulated to bypass authentication. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.1.
Related
cve
cve
CVE-2021-21982
2021-04-01 19:15:13
nvd
nvd
CVE-2021-21982
2021-04-01 19:15:13
prion
prion
Authentication flaw
2021-04-01 19:15:00
threatpost
threatpost
Critical Bug in VMWare Carbon Black Allows Takeover
2021-04-06 20:55:47
How To Defend the Extended Network Against Web Risks
2021-04-05 17:28:13
Apple Mail Zero-Click Security Vulnerability Allows Email Snooping
2021-04-05 19:10:53
cvelist
cvelist
CVE-2021-21982
2021-04-01 18:45:53
thn
thn
Critical Auth Bypass Bug Affects VMware Carbon Black App Control
2021-06-24 08:00:00
Critical Auth Bypass Bug Found in VMware Data Center Security Product
2021-04-07 08:03:00