CVE-2021-36921
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
AIMANAGER versiones anteriores a B115 en los dispositivos MONITORAPP Application Insight Web Application Firewall (AIWAF) con Manager versión 2.1.0, presenta una Autenticación Inapropiada. Un atacante puede conseguir acceso administrativo modificando la respuesta a una petición de comprobación de autenticación
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-07-19 CVE Reserved
- 2021-08-12 CVE Published
- 2023-06-29 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md | Third Party Advisory | |
| https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.monitorapp.com/waf | 2021-08-24 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Monitorapp Search vendor "Monitorapp" | Application Insight Manager Search vendor "Monitorapp" for product "Application Insight Manager" | >= b107 < b115 Search vendor "Monitorapp" for product "Application Insight Manager" and version " >= b107 < b115" | - |
Affected
| in | Monitorapp Search vendor "Monitorapp" | Application Insight Web Application Firewall Search vendor "Monitorapp" for product "Application Insight Web Application Firewall" | - | - |
Safe
|