PT-2023-23321 · Brocade · Brocade Fabric Os

Publicado 2023-08-01 · Atualizado 2024-02-16 · CVE-2023-31432

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.1.1c Brocade Fabric OS versions prior to 9.2.0

Description The issue allows a non-privileged user to obtain root privileges through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid.

Recommendations For Brocade Fabric OS versions prior to 9.1.1c, update to version 9.1.1c or later. For Brocade Fabric OS versions prior to 9.2.0, update to version 9.2.0 or later.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-31432

Produtos afetados

Brocade Fabric Os

Referências · 5

• https://t.me/cibsecurity/67555 · Publicação no Telegram
• https://support.broadcom.com/external/content/SecurityAdvisories/0/22385 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-31432 · Aviso do Fabricante
• https://security.netapp.com/advisory/ntap-20230908-0007 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-31432 · Nota de Segurança