PT-2017-9528 · Brocade · Brocade Network Advisor

Rgod · Published 2017-01-14 · Updated 2018-05-10 · CVE-2016-8207

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade Network Advisor versions prior to and including 14.0.2

Description A Directory Traversal issue in CliMonitorReportServlet could allow remote attackers to read arbitrary files, including those containing sensitive user information.

Recommendations For Brocade Network Advisor versions prior to and including 14.0.2, update to a version later than 14.0.2 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-8207

ZDI-17-052

Affected Products

Brocade Network Advisor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-8207 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8207 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-052 · Security Note
• http://securityfocus.com/bid/95691 · Note
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2017-180 · Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us · Note
• http://zerodayinitiative.com/advisories/ZDI-17-052 · Note