QID 730401

Date Published: 2022-03-16

QID 730401: VMware Carbon Black App Control Improper Authentication Vulnerability (VMSA-2021-0012)

VMware Carbon Black App Control is an application allow listing solution that is designed to enable security operations teams to lock down new and legacy systems against unwanted change, simplify the compliance process, and provide protection for corporate systems.

Affected Versions(s):
VMware Carbon Black App Control v8.0.x, 8.1.x
VMware Carbon Black App Control v8.5.x before v8.5.8
VMware Carbon Black App Control v8.6.x before v8.6.2

QID Detection Logic
This QID sends the GET request to login.php and checks for vulnerable version.

Note: The QID is marked practice as their is no check for the Hotfix.

A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to authenticate.

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as High - 7.5 severity.

Solution

The vendor has released updates to resolve this issue. Refer to VMSA-2021-0012 to obtain additional details.

Vendor References

VMSA-2021-0012 - www.vmware.com/security/advisories/VMSA-2021-0012.html

CVEs related to QID 730401

CVE-2021-21998 |

Software Advisories

Advisory ID	Software	Component	Link
VMSA-2021-0012			www.vmware.com/security/advisories/VMSA-2021-0012.html?

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].