PT-2021-9765 · Brocade · Brocade Sannav

Published 2021-06-09 · Updated 2022-07-12 · CVE-2020-15385

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.1.1

Description The issue allows an authenticated attacker to list directories and files without permission. As a result, users without permission can see folders and hidden files, and can create directories without permission.

Recommendations For Brocade SANnav versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of unauthorized access.

Fix

Related Identifiers

CVE-2020-15385

Affected Products

Brocade Sannav

References · 5

• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1486 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15385 · Security Note
• https://t.me/cvenotify/16226 · Telegram Post
• https://t.me/cvenotify/16002 · Telegram Post