privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x (Brocade Brocade Fabric OS)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.23 % · percentile 13 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- brocade
- NVD status
- Modified
Description
A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report.
Weaknesses (CWE)
- CWE-22 — Improper Limitation of a Pathname to a Restricted Directory
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-14539
- GCVE · GCVE-0-2021-27798
Affected configurations (NVD CPE)
cpe:2.3:o:broadcom:fabric_operating_system:7.3.1d:*:*:*:*:*:*:*cpe:2.3:o:broadcom:fabric_operating_system:7.4.1b:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Brocade · Brocade Fabric OS | affected Brocade Fabric OS 7.4.1b, and 7.3.1d. |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |