RBAC Vulnerability in Brocade SANNav Affects Security Policies

CVE-2022-28165

What is CVE-2022-28165?

A security flaw in the role-based access control (RBAC) implementation of Brocade SANNav versions prior to 2.2.0 allows authenticated remote attackers to gain unauthorized access. This vulnerability arises from insufficient server-side permission checks, enabling attackers to manipulate resources and execute actions beyond their intended privileges. Organizations using affected versions should apply necessary updates to mitigate potential exploitation.

References