PT-2018-17551 · Brocade · Brocade Fabric Os

Publicado 2018-11-08 · Atualizado 2021-06-22 · CVE-2018-6438

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d

Description A local attacker could exploit a vulnerability in the supportsave command of the Brocade Fabric OS command line interface (CLI) to escape the restricted shell and gain root access.

Recommendations For versions prior to 8.2.1, update to version 8.2.1 or later. For versions prior to 8.1.2f, update to version 8.1.2f or later. For versions prior to 8.0.2f, update to version 8.0.2f or later. For versions prior to 7.4.2d, update to version 7.4.2d or later.

Correção

Identificadores relacionados

CVE-2018-6438

Produtos afetados

Brocade Fabric Os

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-6438 · Aviso do Fabricante
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-731 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6438 · Nota de Segurança