CVE-2020-15369

Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remo...

CVE-2020-15369

The vulnerability CVE-2020-15369 affects Brocade Fabric OS in the Supportlink CLI, where the password field is not obfuscated, allowing an authenticated user to obtain remote-server credentials and potentially access the remote host. Affected products include Brocade Fabric OS versions up to 8.2....

CVE-2018-6448

A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host...

CVE-2018-6448

CVE-2018-6448 involves a vulnerability in the management interface of Brocade Fabric OS. The issue could allow a remote attacker to cause a denial of service on the vulnerable host when exploiting the management interface, with affected versions being Brocade Fabric OS releases prior to v9.0.0. P...

CVE-2018-6449

Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTTP headers...

CVE-2018-6449

CVE-2018-6449 is a Host Header Injection vulnerability in the http management interface of Brocade Fabric OS. The issue affects Fabric OS versions before v9.0.0, allowing a remote attacker to inject arbitrary HTTP headers via the management interface. The Red Hat/Red Hat-linked entry and Broadcom...

CVE-2019-16211

Brocade SANnav versions before v2.1.0, contain a Plaintext Password Storage vulnerability...

CVE-2019-16211

CVE-2019-16211 affects Brocade SANnav versions before v2.1.0 and is described as a plaintext password storage vulnerability. Public records in NVD list a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no privileges, and high confidentiality/integrity/availability impact. Lenovo’s sec...

CVE-2019-16212

CVE-2019-16212 affects Brocade SANnav prior to v2.1.0. The issue allows a remote authenticated attacker to perform an LDAP injection and bypass authentication. Remediation is to upgrade SANnav to version 2.1.0 or higher (as documented by Broadcom/Brocade advisories and Lenovo security notes). If ...

CVE-2019-16212

A vulnerability in Brocade SANnav versions before v2.1.0 could allow a remote authenticated attacker to conduct an LDAP injection. The vulnerability could allow a remote attacker to bypass the authentication process...

CVE-2018-6447

A Reflective XSS Vulnerability in HTTP Management Interface in Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g could allow authenticated attackers with access to the web interface to hijack a user’s session and take over the account...

CVE-2018-6447

The CVE-2018-6447 issue is a Reflective XSS in Brocade Fabric OS to the HTTP Management Interface. Affected: Brocade Fabric OS versions before 9.0.0, and prior lines 8.2.2c, 8.2.1e, 8.1.2k, 8.2.0_CBN3, 7.4.2g. Root cause: XSS vulnerability that could allow an authenticated user with web UI access...

BSA-2020-1075

Security Advisory ID : BSA-2020-1075 Component : Management Interface Revision : 2.0 A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 or before Brocade Fabric OS v8.2.1could allow a remote attacker to perform a denial of service attack on t...

BSA-2020-1082

Security Advisory ID : BSA-2020-1082 Component : REST API Revision : 2.0 Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks. Note:...

BSA-2020-1081

Security Advisory ID : BSA-2020-1081 Component : shell variables Revision : 2.0 A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell...

BSA-2020-1078

Security Advisory ID : BSA-2020-1078 Component : Supportlink CLI Revision : 2.0 Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An...

BSA-2020-1084

Security Advisory ID : BSA-2020-1084 Component : Rest API Revision : 2.0 Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input. Note: Brocade Fabric OS versions before v8.2.1 are not affected. Rest API is...

BSA-2020-1077

Security Advisory ID : BSA-2020-1077 Component : HTTP management interface Revision : 2.0 Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0, v8.2.3 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTT...

BSA-2020-1080

Security Advisory ID : BSA-2020-1080 Component : seccryptocfg templates Revision : 2.0 Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, contains code injection and privilege escalation vulnerability. The vulnerability could allow an unauthenticate...

BSA-2020-1083

Security Advisory ID : BSA-2020-1083 Component : secccrypptocfg Revision : 2.0 Brocade Fabric OS before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0CBN3, v7.4.2g contains an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow...