CVE-2021-36921

Published: Aug 12, 2021Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.

Affected (1)

Products: Monitorapp: Application Insight Manager

Monitorapp

1 product

Application Insight Manager

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Monitorapp Application Insight Manager	From b107 to b115

Running on/with	Platform Versions
Monitorapp Application Insight Web Application Firewall	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md

Source: cve@mitre.org

Third Party Advisory

https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921

Source: cve@mitre.org

Third Party Advisory

https://www.monitorapp.com/waf/

Source: cve@mitre.org

ProductVendor Advisory

https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0021/FEYE-2021-0021.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/monitorapp-aicc/report/wiki/CVE-2021-36921

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.monitorapp.com/waf/

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

Timeline

No history available yet.