CVE-2021-28123 - Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.

CVE-2021-28123

Summary

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version.

References

https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28123.md

Vulnerable Configurations

cpe:2.3:a:cohesity:cohesity_dataplatform:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.5.1:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.5.1b:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.5.1b:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.4:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.4:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.4.1c:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.4.1c:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.3:*:*:*:*:*:*:*
cpe:2.3:a:cohesity:cohesity_dataplatform:6.3:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 12-07-2022 - 17:42)
Impact:
Exploitability:

CWE

CWE-1188

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

Last major update

12-07-2022 - 17:42

Published

02-04-2021 - 15:15

Last modified

12-07-2022 - 17:42