Webtools Vulnerability in Brocade Fabric OS
CVE-2022-28169

8.8HIGH

Key Information:

Vendor

Broadcom
Status
Brocade Fabric Os
Vendor
CVE Published:
25 October 2022

What is CVE-2022-28169?

A vulnerability in Brocade Webtools of Brocade Fabric OS allows a user with low privileges to escalate their privileges and gain admin rights. This flaw occurs when authorization headers, specifically the operator's session ID, are transmitted without encryption, making it susceptible to interception. Malicious users can exploit this weakness to create new admin-user roles, compromising the security and integrity of the system. Users on older versions of Brocade Fabric OS should prioritize updating to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Brocade Fabric OS Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e, and v8.2.3c

References

https://www.broadcom.com/support/fibre-channel-networking...
https://security.netapp.com/advisory/ntap-20230127-0001/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.