PT-2017-9528 · Brocade · Brocade Network Advisor

Rgod · Publicado 2017-01-14 · Atualizado 2018-05-10 · CVE-2016-8207

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade Network Advisor versions prior to and including 14.0.2

Description A Directory Traversal issue in CliMonitorReportServlet could allow remote attackers to read arbitrary files, including those containing sensitive user information.

Recommendations For Brocade Network Advisor versions prior to and including 14.0.2, update to a version later than 14.0.2 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2016-8207

ZDI-17-052

Produtos afetados

Brocade Network Advisor

Referências · 7

• http://securityfocus.com/bid/95691 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8207 · Nota de Segurança
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180 · Nota
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us · Nota
• https://osv.dev/vulnerability/CVE-2016-8207 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-17-052 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-17-052 · Nota