AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…
Priority MEDIUM 41CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
Why it matters now
EPSS 0.01366 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* | b107 to before b115 | Vulnerable | Monitorapp |
| cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Monitorapp |
- cpe:2.3:a:monitorapp:application_insight_manager:*:*:*:*:*:*:*:* Versions b107 to before b115 Vulnerable ·Monitorapp
- cpe:2.3:a:monitorapp:application_insight_web_application_firewall:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Monitorapp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-36921
- 2026-10-03 Alias added: GHSA-fj8v-w5xg-jhc7
References
More Monitorapp Application Insight Manager vulnerabilities
- TI-2021-15057 AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)… CVSS 3.1HIGH 8.1
Sources
- CVE-2021-36921 · CVE Program
- CVE-2021-36921 · NVD
- FIRST EPSS
- GHSA-fj8v-w5xg-jhc7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences