PT-2018-8322 · Brocade · Brocade Fabric Os

Publicado 2018-02-08 · Atualizado 2021-06-22 · CVE-2017-6225

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions prior to 7.4.2b Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions prior to 8.1.2 Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions prior to 8.2.0

Description A cross-site scripting (XSS) issue in the web-based management interface of Brocade Fibre Channel SAN products could allow remote attackers to execute arbitrary code or access sensitive browser-based information.

Recommendations For versions prior to 7.4.2b, update to version 7.4.2b or later. For versions prior to 8.1.2, update to version 8.1.2 or later. For versions prior to 8.2.0, update to version 8.2.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-6225

Produtos afetados

Brocade Fabric Os

Referências · 5

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-525 · Nota
• https://osv.dev/vulnerability/CVE-2017-6225 · Aviso do Fabricante
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03851en_us · Nota
• https://t.me/cvenotify/16669 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-6225 · Nota de Segurança