Lucene search

[email protected]CVE-2019-16204

HistoryFeb 05, 2020 - 4:15 p.m.

CVE-2019-16204

2020-02-0516:15:10

CWE-532

[email protected]

web.nvd.nist.gov

brocade

fabric os

cve-2019-16204

security vulnerability

external passwords

authentication keys

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.1%

JSON

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.

Affected configurations

NVD

Node

broadcomfabric_operating_systemRange<7.4.2f

broadcomfabric_operating_systemRange8.1.2–8.1.2j

broadcomfabric_operating_systemRange8.2.1–8.2.1d

broadcomfabric_operating_systemRange8.2.2–8.2.2a

CPENameOperatorVersion
broadcom:fabric_operating_systembroadcom fabric operating systemlt7.4.2f
broadcom:fabric_operating_systembroadcom fabric operating systemlt8.1.2j
broadcom:fabric_operating_systembroadcom fabric operating systemlt8.2.1d
broadcom:fabric_operating_systembroadcom fabric operating systemlt8.2.2a

CPE	Name	Operator	Version
broadcom:fabric_operating_system	broadcom fabric operating system	lt	7.4.2f
broadcom:fabric_operating_system	broadcom fabric operating system	lt	8.1.2j
broadcom:fabric_operating_system	broadcom fabric operating system	lt	8.2.1d
broadcom:fabric_operating_system	broadcom fabric operating system	lt	8.2.2a

CNA Affected

[
  {
    "product": "Brocade Fabric OS",
    "vendor": "Brocade",
    "versions": [
      {
        "status": "affected",
        "version": "Brocade Fabric OS Versions before v7.4.2f"
      },
      {
        "status": "affected",
        "version": "v8.2.2a"
      },
      {
        "status": "affected",
        "version": "v8.1.2j and v8.2.1d"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20200511-0007/

www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-905

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

55.1%

JSON

Related for CVE-2019-16204

lenovo2 cvelist1 prion1 nvd1