AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
References
| Link | Resource |
|---|---|
| https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md | Third Party Advisory |
| https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 | Third Party Advisory |
| https://www.monitorapp.com/waf/ | Product Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Aug 2021, 15:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md - Third Party Advisory | |
| References | (MISC) https://www.monitorapp.com/waf/ - Product, Vendor Advisory | |
| References | (CONFIRM) https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 8.8 |
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* |
12 Aug 2021, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-08-12 18:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-36921
Mitre link : CVE-2021-36921
CVE.ORG link : CVE-2021-36921
JSON object : View
Products Affected
monitorapp
- application_insight_web_application_firewall
- application_insight_manager
CWE
CWE-287
Improper Authentication