Fabric Operating System@* Security Vulnerabilities and Issues — Fabric Operating System@* CVE List

Lucene search

BroadcomFabric Operating System*

8 matches found

CVE•added 2020/12/11 9:15 p.m.•62 views

CVE-2020-15376

Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness in the ldap implementation that could allow a remote ldap user to login in the Brocade Fibre Channel SAN switch with "user" privileges if it is not associated with any groups.

4.3CVSS4.6AI score0.00226EPSS

CVE•added 2020/02/05 4:15 p.m.•58 views

CVE-2019-16204

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server.

7.5CVSS7.7AI score0.00348EPSS

CVE•added 2020/12/11 9:15 p.m.•48 views

CVE-2020-15375

Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input validation weakness in the command line interface when secccrypptocfg is invoked. The vulnerability could allow a local authenticated user to run arbitrary commands and perform escala...

6.7CVSS8.1AI score0.00049EPSS

CVE•added 2020/09/25 2:15 p.m.•41 views

CVE-2018-6449

Host Header Injection vulnerability in the http management interface in Brocade Fabric OS versions before v9.0.0 could allow a remote attacker to exploit this vulnerability by injecting arbitrary HTTP headers

6.1CVSS7.8AI score0.0027EPSS

CVE•added 2020/02/05 4:15 p.m.•40 views

CVE-2019-16203

Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these credentials are given as a command line option when configuring the ESRS client.

7.5CVSS7.7AI score0.00322EPSS

CVE•added 2020/09/25 2:15 p.m.•40 views

CVE-2020-15372

A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging.

5.5CVSS7.2AI score0.00072EPSS

CVE•added 2020/09/25 2:15 p.m.•34 views

CVE-2018-6448

A vulnerability in the management interface in Brocade Fabric OS Versions before Brocade Fabric OS v9.0.0 could allow a remote attacker to perform a denial of service attack on the vulnerable host.

7.5CVSS8.3AI score0.00598EPSS

CVE•added 2020/09/25 2:15 p.m.•27 views

CVE-2020-15370

Brocade Fabric OS versions before Brocade Fabric OS v7.4.2g could allow an authenticated, remote attacker to view a user password in cleartext. The vulnerability is due to incorrectly logging the user password in log files.

6.5CVSS7.8AI score0.00256EPSS