PT-2020-14399 · Brocade · Brocade Fabric Os

Published 2020-09-25 · Updated 2021-06-22 · CVE-2020-15372

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 7.4.2g Brocade Fabric OS versions prior to 8.1.2k Brocade Fabric OS versions prior to 8.2.0 CBN3 Brocade Fabric OS versions prior to 8.2.1e Brocade Fabric OS versions prior to 8.2.2a1 Brocade Fabric OS versions prior to 8.2.2c Brocade Fabric OS version 9.0.0

Description A vulnerability in the command-line interface could allow a local authenticated attacker to modify shell variables, potentially leading to an escalation of privileges or bypassing the logging.

Recommendations For Brocade Fabric OS versions prior to 7.4.2g, update to version 7.4.2g or later. For Brocade Fabric OS versions prior to 8.1.2k, update to version 8.1.2k or later. For Brocade Fabric OS versions prior to 8.2.0 CBN3, update to version 8.2.0 CBN3 or later. For Brocade Fabric OS versions prior to 8.2.1e, update to version 8.2.1e or later. For Brocade Fabric OS versions prior to 8.2.2a1, update to version 8.2.2a1 or later. For Brocade Fabric OS versions prior to 8.2.2c, update to version 8.2.2c or later. For Brocade Fabric OS version 9.0.0, update to a later version.

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2020-15372

Affected Products

Brocade Fabric Os

References · 4

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2020-1081 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15372 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15372 · Security Note
• https://t.me/cvenotify/16661 · Telegram Post