PT-2023-23315 · Brocade · Brocade Fabric Os

CVE-2023-31427 · Publicado 2023-08-01 · Atualizado 2024-02-16

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS version 9.2.0

Description The issue allows an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. It is noted that starting with Fabric OS v9.1.0, “root” account access is disabled.

Recommendations For Brocade Fabric OS versions prior to 9.1.1c, update to version 9.1.1c or later to resolve the issue. For Brocade Fabric OS version 9.2.0, update to a version later than 9.2.0 to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-31427

Produtos afetados

Brocade Fabric Os

Referências · 4

• https://support.broadcom.com/external/content/SecurityAdvisories/0/22379 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-31427 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-31427 · Nota de Segurança
• https://security.netapp.com/advisory/ntap-20230908-0007 · Nota