AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.
References
| Link | Resource |
|---|---|
| https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0022/FEYE-2021-0022.md | Third Party Advisory |
| https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36982 | Third Party Advisory |
| https://www.monitorapp.com/waf/ | Product Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
24 Aug 2021, 15:55
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 | |
| CVSS |
v2 : v3 : |
v2 : 9.3
v3 : 8.1 |
| References | (CONFIRM) https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36982 - Third Party Advisory | |
| References | (MISC) https://www.monitorapp.com/waf/ - Product, Vendor Advisory | |
| References | (MISC) https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0022/FEYE-2021-0022.md - Third Party Advisory | |
| CPE | cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* |
12 Aug 2021, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-08-12 18:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-36982
Mitre link : CVE-2021-36982
CVE.ORG link : CVE-2021-36982
JSON object : View
Products Affected
monitorapp
- application_insight_web_application_firewall
- application_insight_manager
CWE
CWE-20
Improper Input Validation