CVE-2021-28123 : Security Advisory and Response
Learn about CVE-2021-28123 affecting Cohesity DataPlatform versions 6.3 to 6.5.1b, enabling unauthorized access through SSH. Find mitigation steps and necessary updates.
Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c, and 6.5.1 through 6.5.1b are affected by an Undocumented Default Cryptographic Key Vulnerability. This vulnerability allows an attacker to gain access to the Linux system using the SSH key present in the affected versions.
Understanding CVE-2021-28123
This section delves into the details of the Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform versions.
What is CVE-2021-28123?
CVE-2021-28123 is a vulnerability in Cohesity DataPlatform versions 6.3 to 6.5.1b that arises from an undocumented default cryptographic key, enabling unauthorized access through SSH.
The Impact of CVE-2021-28123
The impact of this vulnerability is significant as it allows malicious actors to access the Linux system, potentially leading to unauthorized control and data breaches.
Technical Details of CVE-2021-28123
This section outlines the technical aspects of the vulnerability.
Vulnerability Description
The vulnerability exists due to an undocumented default cryptographic key present in the affected Cohesity DataPlatform versions, enabling unauthorized SSH access.
Affected Systems and Versions
Cohesity DataPlatform versions 6.3 prior to 6.3.1g, 6.4 up to 6.4.1c, and 6.5.1 through 6.5.1b are affected by this vulnerability.
Exploitation Mechanism
Exploiting CVE-2021-28123 involves leveraging the undocumented default cryptographic key to gain unauthorized access to the Linux system.
Mitigation and Prevention
To address CVE-2021-28123, immediate actions and long-term security practices are crucial.
Immediate Steps to Take
Users should update Cohesity DataPlatform to versions that contain fixes for the undocumented default cryptographic key vulnerability. Additionally, restricting network access to vulnerable systems is advised.
Long-Term Security Practices
Implementing a robust cybersecurity strategy, keeping systems up to date, and regularly monitoring for security vulnerabilities are essential for long-term security.
Patching and Updates
Regularly applying patches and updates released by Cohesity for DataPlatform is critical in maintaining a secure environment.