privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x (Brocade Brocade Fabric OS)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 13 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- brocade
- Statut NVD
- Modified
Description
A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report.
Faiblesses (CWE)
- CWE-22 — Traversée de répertoire
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-14539
- GCVE · GCVE-0-2021-27798
Configurations affectées (CPE NVD)
cpe:2.3:o:broadcom:fabric_operating_system:7.3.1d:*:*:*:*:*:*:*cpe:2.3:o:broadcom:fabric_operating_system:7.4.1b:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Brocade · Brocade Fabric OS | affected Brocade Fabric OS 7.4.1b, and 7.3.1d. |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |