PT-2016-3224 · Brocade · Brocade Network Advisor
Rgod
·
Publicado
2016-10-17
·
Atualizado
2020-01-21
·
CVE-2016-8204
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Brocade Network Advisor versions prior to and including 14.0.2
Description
A Directory Traversal issue in the FileReceiveServlet of Brocade Network Advisor could allow remote attackers to upload a malicious file in a section of the file system where it can be executed. The vulnerability exists due to incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a remote attacker to upload a malicious file to an area of the file system where it can be executed.
Recommendations
For Brocade Network Advisor versions prior to and including 14.0.2, update to a version later than 14.0.2 to resolve the issue.
As a temporary workaround, consider restricting access to the FileReceiveServlet to minimize the risk of exploitation.
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Brocade Network Advisor