description: VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings.
problem types: Authentication bypass
affected:
{
product: VMware Carbon Black Cloud Workload appliance
vendor: n/a
versions:
status: affected, version: VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01
}