CVEvulnerability

CVE-2021-28124

5.9 MEDIUM Published 2021-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-306

Description

A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.

Affected configurations

• cohesity cohesity dataplatform (>= 6.3 <= 6.3.1g) • cohesity cohesity dataplatform (>= 6.4 <= 6.4.1c) • cohesity cohesity dataplatform (>= 6.5.1 <= 6.5.1b)

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References