BSA-2021-1480

2021-05-1000:00:00

Broadcom Security Response

support.broadcom.com

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

Security Advisory ID : BSA-2021-1480

Component : Webtools

Revision : 1.0

Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration;this is commonly referred to as Server-Side Request Forgery (SSRF).
Attackers can utilize SSRF to cause the target service to carry out requests to servers or services which otherwise would be inaccessible.

Affected Products

Brocade SANnav versions before SANnav 2.1.1