CVE-2018-6443: Undefined Security Weakness

A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications. A remote unauthenticated user who...

PT-2019-11024

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.0.3 Description: A remote unauthenticated attacker could export the current user database, which includes encrypted passwords of the system. The attacker could gain access to the Brocade Network...

PT-2019-11023

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.1.0 Description: A remote unauthenticated attacker could exploit this issue to execute arbitrary code or arbitrary OS commands. Recommendations: For versions prior to 14.1.0, update to version 14.1...

CVE-2018-6444: Improper Neutralization of Special Elements used in an OS Command

A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code. The vulnerability could also be exploited to execute arbitrary OS Commands...

CVE-2018-6445: Undefined Security Weakness

A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encrypted not hashed password of the systems. The attacker could gain access to the Brocade Network Advisor System after...

BSA-2018-746

Security Advisory ID : BSA-2018-746 Component : Servlet Revision : 1.0: Initial A Vulnerability in Brocade Network Advisor Version before 14.0.3 could allow a remote unauthenticated attacker to export the current user database which includes the encypted not hashed password of the systems. The...

BSA-2018-744

Security Advisory ID : BSA-2018-744 Component : Webconsole Revision : 1.0: Initial A Vulnerability in Brocade Network Advisor Version before 14.1.0 could allow a remote unauthenticated attacker to execute arbitray code.The vulnerability could also be exploited to execute arbitrary OS Commands...

PT-2018-3344

Name of the Vulnerable Software and Affected Versions: Brocade Network Advisor versions prior to 14.3.1 Description: A vulnerability in Brocade Network Advisor could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using undocumented...

BSA-2018-743

Security Advisory ID : BSA-2018-743 Component : Hard-coded Credentials Revision : 3.1: Final A vulnerability in Brocade Network Advisor could allow an unauthenticated, remote attacker to log into the JMX Console of an affected system using an undocumented User credentials. The vulnerability is du...

BSA-2018-841

Security Advisory ID : BSA-2018-841 Component : Hard-coded Credentials Revision : 3.0: Final A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented...

Brocade Fabric OS Elevation of Privilege Vulnerability (CNVD-2019-05926)

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade Communications Systems Brocade in the United States. A security vulnerability exists in the configdownload command of the command line interface in Brocade FOS. A local attacker...

Brocade Fabric OS proxy service information disclosure and denial of service vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade Communications Systems USA. proxy service is one of the proxy service components. An information disclosure and denial of service vulnerability exists in the proxy service in...

CVE-2018-6439

A Vulnerability in the configdownload command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

CVE-2018-6440

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

CVE-2018-6439

CVE-2018-6439 (Brocade Fabric OS configdownload) affects Brocade Fabric OS CLI; versions prior to 8.2.1, 8.1.2f, 8.0.2f, and 7.4.2d expose a local escalation bug in the configdownload command that lets a local attacker escape the restricted shell and gain root access. Affected products include IB...

CVE-2018-6440

CVE-2018-6440 maps to a Brocade Fabric OS proxy service vulnerability. Affects Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, and 7.4.2d where the proxy service could leak sensitive information and potentially allow a remote unauthenticated attacker to cause a denial-of-service. IBM’s advisory ...

CVE-2018-6439

A Vulnerability in the configdownload command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

CVE-2018-6440

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...

Security feature bypass

A Vulnerability in the configdownload command of Brocade Fabric OS command line interface CLI versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow a local attacker to escape the restricted shell and, gain root access...

Design/Logic Flaw

A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow remote unauthenticated attackers to obtain sensitive information and possibly cause a denial of service attack...