CVE-2021-21982

CVE-2021-21982 is a critical authentication bypass vulnerability affecting VMware Carbon Black Cloud Workload appliance versions 1.0.0 and 1.0.1. This flaw allows an unauthenticated attacker with network access to the administrative interface to obtain a valid authentication token, enabling them to view and modify administrative settings. With a CVSS score of 9.1 (Critical), it presents a high-impact risk due to its network-based attack vector and low attack complexity, requiring no user interaction. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention and media coverage, indicating its perceived importance.