CVE-2021-28123: Cohesity Dataplatform

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version.

Affected products

• Cohesity Cohesity Dataplatform: from 6.3, before 6.3.1g (fixed in 6.3.1g); from 6.4, before 6.4.1c (fixed in 6.4.1c); from 6.5.1, before 6.5.1b (fixed in 6.5.1b)

Published 2021-04-02. Last modified 2026-06-17.