CVEvulnerability
CVE-2021-36921
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-287
Description
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
Affected configurations
• monitorapp application insight manager (>= b107 < b115)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md Third Party Advisory
- https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 Third Party Advisory
- https://www.monitorapp.com/waf/ Product, Vendor Advisory
- https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md Third Party Advisory
- https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921 Third Party Advisory
- https://www.monitorapp.com/waf/ Product, Vendor Advisory