Authentication Bypass in Brocade Fabric OS by Broadcom

CVE-2021-27791

What is CVE-2021-27791?

A vulnerability exists in the way Brocade Fabric OS Web application service processes the Authentication header before versions v9.0.1a and v8.2.3a. An attacker exploiting this flaw could send a malformed authentication header, allowing them to read memory addresses beyond the intended range. This could facilitate access to the system without proper authentication, posing significant security risks.

References