Security update is available to remediate the critical vulnerability addressing VMware Carbon Black Cloud Workload appliance.
CVE-2021-21982 — Bypass Authentication
A URL on the administrative interface of the VMware Carbon Black Cloud Workload appliance can be manipulated to bypass authentication.
A malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance may be able to obtain a valid authentication token, granting access to the administration API of the appliance.
However, Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.
VMware Carbon Black Cloud Workload appliance running on 1.0.1 and prior
On the other hand, VMware has evaluated the severity of this issue to be in the CRITICAL severity range with a maximum CVSSv3 base score of 9.1.
In short update to the latest version, version 1.0.2, of the VMware Carbon Black Cloud Workload appliance.
In addition, Users should also limit access to the local administrative interface of the appliance to only those that need it, VMware recommended.