CVE-2021-36921

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published: Aug 12, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-369227.8RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthori CVE-2021-369237.8RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthori CVE-2021-369247.8RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool ov CVE-2021-369257.8RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitr CVE-2021-369267.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability CVE-2021-369277.8Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability CVE-2021-369286.0Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2021-369296.3Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2021-36939.6LedgerSMB does not check the origin of HTML fragments merged into the browser's DOM. By sending a specially crafted URL to an authenticated CVE-2021-369305.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2021-369314.4Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2021-369327.5Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability