CVE-2021-28124

Published: Apr 2, 2021Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.

Affected (3)

Products: Cohesity: Cohesity Dataplatform

1 product

Cohesity Dataplatform

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cohesity Cohesity Dataplatform	From 6.3 to 6.3.1g
Cohesity Cohesity Dataplatform	From 6.4 to 6.4.1c
Cohesity Cohesity Dataplatform	From 6.5.1 to 6.5.1b

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28124.md

Source: cve@mitre.org

Third Party Advisory

https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28124.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.