PT-2023-23312 · Brocade · Brocade Sannav

Published 2023-08-31 · Updated 2023-09-05 · CVE-2023-31424

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 2.3.0 Brocade SANnav version 2.2.2 and earlier, excluding 2.2.2a

Description The issue allows remote unauthenticated users to bypass web authentication and authorization.

Recommendations For Brocade SANnav versions prior to 2.3.0, update to version 2.3.0 or later. For Brocade SANnav version 2.2.2 and earlier, excluding 2.2.2a, update to version 2.2.2a or later.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2023-31424

Affected Products

Brocade Sannav

References · 5

• https://osv.dev/vulnerability/CVE-2023-31424 · Vendor Advisory
• https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22507 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31424 · Security Note
• https://security.netapp.com/advisory/ntap-20240229-0004 · Note
• https://t.me/cibsecurity/69510 · Telegram Post