Webtools Vulnerability in Brocade Fabric OS

CVE-2022-28169

What is CVE-2022-28169?

A vulnerability in Brocade Webtools of Brocade Fabric OS allows a user with low privileges to escalate their privileges and gain admin rights. This flaw occurs when authorization headers, specifically the operator's session ID, are transmitted without encryption, making it susceptible to interception. Malicious users can exploit this weakness to create new admin-user roles, compromising the security and integrity of the system. Users on older versions of Brocade Fabric OS should prioritize updating to mitigate this risk.

References