Knowledge of full path name

CVE-2023-31427

What is CVE-2023-31427?

A local user with knowledge of full path names in Brocade Fabric OS can execute commands without permission checks on affected versions prior to v9.1.1c and v9.2.0. This flaw permits unauthorized operations, presenting a significant security risk. Notably, starting from Fabric OS v9.1.0, access to the 'root' account has been restricted, necessitating prompt updates to mitigate potential exploits.

References