PT-2018-17547 · Brocade · Brocade Fabric Os

Publicado 2018-11-08 · Atualizado 2021-06-22 · CVE-2018-6434

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d

Description A vulnerability in the web management interface could allow attackers to intercept or manipulate a user's session ID.

Recommendations For versions prior to 8.2.1, update to version 8.2.1 or later. For versions prior to 8.1.2f, update to version 8.1.2f or later. For versions prior to 8.0.2f, update to version 8.0.2f or later. For versions prior to 7.4.2d, update to version 7.4.2d or later.

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2018-6434

Produtos afetados

Brocade Fabric Os

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6434 · Nota de Segurança
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-736 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-6434 · Aviso do Fabricante