Lucene search
Broadcom Security ResponseBSNSA22379HistoryAug 01, 2023 - 12:00 a.m.
CVE-2023-31427 - Knowledge of full path name
2023-08-0100:00:00
Broadcom Security Response
support.broadcom.com
8
brocade fabric os
full path name
vulnerability
command execution
privilege escalation
Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. Starting with Fabric OS v9.1.0, “root” account access is disabled.
Affected configurations
Node
broadcombrocade_fabric_operating_systemRange<9.1.1c
ORbroadcombrocade_fabric_operating_systemRange<9.2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| brocade fabric os | lt | 9.1.1c | |
| brocade fabric os | lt | 9.2.0 |
Related
cve
cve
CVE-2023-31427
2023-08-01 23:15:28
cvelist
cvelist
CVE-2023-31427 Knowledge of full path name
2023-08-01 22:46:17
prion
prion
Command injection
2023-08-01 23:15:00
nvd
nvd
CVE-2023-31427
2023-08-01 23:15:28