VMware fixes authentication bypass in Carbon Black App Control

guest · Jun 23, 2021

VMware fixes authentication bypass in Carbon Black App Control
June 23, 2021
https://www.bleepingcomputer.com/ne...ntication-bypass-in-carbon-black-app-control/

VMware Carbon Black App Control has been updated this week to fix a critical-severity vulnerability that allows access to the server without authentication.

Carbon Black App Control is designed for corporate environments, to harden the security of systems both old and new, and protect them against unauthorized modifications, such as those generated by malware or zero-day exploits.
Path to unlocking critical systems
Tracked as CVE-2021-21998, the vulnerability is an authentication bypass affecting VMware Carbon Black App Control (AppC) versions 8.0, 8.1, 8.5 before 8.5.8, and 8.6 before 8.6.2.

Threat actors with access to the AppC management server could exploit the bug to gain administrative privileges without the need to authenticate, informs the security advisory from VMware.
Click to expand...

CISA has also released an advisory, to encourage users and network administrators to check the latest security briefs from VMware and apply the updates.
Click to expand...

Log in or Sign up

VMware fixes authentication bypass in Carbon Black App Control

guest Guest

Log in or Sign up

VMware fixes authentication bypass in Carbon Black App Control

guest Guest

Useful Searches