Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-28169
HistoryOct 25, 2022 - 9:15 p.m.

Authorization

2022-10-2521:15:00
PRIOn knowledge base
www.prio-n.com
2

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

Brocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c could allow a low privilege webtools, user, to gain elevated admin rights, or privileges, beyond what is intended or entitled for that user. By exploiting this vulnerability, a user whose role is not an admin can create a new user with an admin role using the operator session id. The issue was replicated after intercepting the admin, and operator authorization headers sent unencrypted and editing a user addition request to use the operator’s authorization header.

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.2%

Related for PRION:CVE-2022-28169