CVE-2016-8205

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8206

A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files...

CVE-2016-8205

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8201

CVE-2016-8201 is a CSRF vulnerability in Brocade Virtual Traffic Manager (vTM) affecting versions up to 11.0. An attacker could trick a logged-in admin into performing administrative changes on the traffic-manager cluster. Remediation and confirmed fixes are available in later releases: vTM 11.1,...

CVE-2016-8206

CVE-2016-8206 is a Directory Traversal vulnerability in Brocade/IBM Network Advisor, affecting the SoftwareImageUpload servlet in versions up to and including 14.0.2. A remote attacker could write to arbitrary files and, in related notes, delete files via crafted requests. IBM and related advisor...

CVE-2016-8205

Brocade Network Advisor (DashboardFileReceiveServlet) contains a Directory Traversal vulnerability (CVE-2016-8205) in versions up to and including 14.0.2. A remote attacker could upload a malicious file to a location where it can be executed. IBM and other advisories confirm the issue across rela...

CVE-2016-8205

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8207

A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information...

CVE-2016-8204

A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8206

A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files...

CVE-2016-8207

Brocade Network Advisor contains a Directory Traversal vulnerability in the CliMonitorReportServlet, affecting versions up to and including 14.0.2. An unauthenticated remote attacker can exploit a crafted HTTP request to read arbitrary files, including those with sensitive user information. The i...

CVE-2016-8201

A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster...

CVE-2016-8204

CVE-2016-8204 affects Brocade Network Advisor (FileReceiveServlet). A directory-traversal flaw in versions up to and including 14.0.2 could let a remote attacker upload a malicious file to a location where it can be executed, enabling remote code execution. IBM advisories indicate fixes in IBM Ne...

CVE-2016-8207: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information...

CVE-2016-8201: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster...

CVE-2016-8204: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8205: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed...

CVE-2016-8206: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files...

BSA-2016-209

Security Advisory ID : BSA-2016-209 Component : Web UI Revision : 1.0: Final A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0, could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster...

BSA-2017-179

Security Advisory ID : BSA-2017-179 Component : BNA Revision : 1.0: Final A Directory Traversal Vulnerability in servletSoftwareImageUploadin the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently dele...