CVEvulnerability

CVE-2021-28123

9.8 CRITICAL Published 2021-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-1188

Description

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version.

Affected configurations

• cohesity cohesity dataplatform (>= 6.3 < 6.3.1g) • cohesity cohesity dataplatform (>= 6.4 < 6.4.1c) • cohesity cohesity dataplatform (>= 6.5.1 < 6.5.1b)

Related

Weakness · CWE (1)

  • CWE-1188 Initialization of a Resource with an Insecure Default weakness

References