Design/Logic Flaw

Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could lead to a slower response to CLI commands and other operations...

Information disclosure

Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. As a result, users without permission can see folders, and hidden files, and can create directories without permission...

Design/Logic Flaw

The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications...

CVE-2020-15386

CVE-2020-15386 affects Brocade Fabric OS: versions prior to v9.0.1a and 8.2.3a, and after v9.0.0 and 8.2.2d, may observe high CPU load during security scanning, causing slower responses to CLI commands and other operations. Connected sources confirm affected ranges but do not specify a public fix...

CVE-2020-15386

Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scanning, which could lead to a slower response to CLI commands and other operations...

CVE-2020-15385

Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permission. As a result, users without permission can see folders, and hidden files, and can create directories without permission...

CVE-2020-15385

CVE-2020-15385 – Brocade SANnav prior to 2.1.1 : An authenticated attacker can list directories and files without permission, leaking folders and hidden files and enabling creation of directories. Connected documents confirm the issue affects SANnav versions before 2.1.1 and describe the root cau...

CVE-2020-15384

Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header...

CVE-2020-15384

The CVE-2020-15384 entry concerns Brocade SANnav prior to version 2.1.1, which contains an information disclosure vulnerability. Exploitation concerns the exposure of internal server information in the initial login response header. Affected product: Brocade SANnav before 2.1.1. Root cause: infor...

CVE-2020-15387

The CVE-2020-15387 entry concerns Brocade Fabric OS hosts whose SSH servers (and SANnav) used keys

CVE-2020-15387

The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the trace logging level, exposing sensitive information. Affected product: Broadcom/Brocade SANnav prior to 2.1.1. Root cause: verbose logging of credentials. Impact: credential exposure risk; no exploitation details are provided in ...

CVE-2020-15380

Brocade SANnav before version 2.1.1 logs account credentials at the ‘trace’ logging level...

CVE-2020-15379

Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for custom field name...

CVE-2020-15379

Brocade SANnav before v2.1.0a suffers an input validation flaw on the length of user-supplied data used as a custom field name. The issue enables remote attackers to trigger a denial-of-service via data corruption that inflates resources, causing SANnav to become unavailable until the corrupted d...

CVE-2020-15378

The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface...

CVE-2020-15378

CVE-2020-15378 affects the OVA version of Broadcom/Brocade SANnav prior to 2.1.1 when IPv6 networking is enabled. The issue exposes docker container ports to the network, expanding the attack surface. According to BSA-2021-1481, IPv6 networking exposure occurs during installation or via the chang...

CVE-2020-15381

Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server...

CVE-2020-15382

Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time...

CVE-2020-15383

Running security scans against the SAN switch can cause config and secnotify processes within the firmware before Brocade Fabric OS v9.0.0, v8.2.2d and v8.2.1e to consume all memory leading to denial of service impacts possibly including a switch panic...