Threat database

A vulnerability in Brocade SANnav versions before 3.0.1 can expose the Brocade Fabric OS switch admin password in plaintext within a memory swap file on the server hosting the SANnav VM. This occurs when the server experiences an Out Of Memory (OOM) condition. An authenticated admin user with access to the SANnav server could potentially view this swap file and retrieve the password.

A vulnerability in Brocade SANnav before versions 2.4.0b and 3.0.0 causes encoded passwords and authentication tokens to be printed in log files. An authenticated attacker with access to these log files, including the SANnav supportsave, could potentially retrieve sensitive credentials. This issue affects on-premises deployments and does not have confirmed exploits in the wild. No patch or remediation information is provided in the available data.

A path traversal vulnerability exists in the Zone Alias Import flow feature of Brocade SANnav before version 3.0.0a. This flaw allows a local authenticated attacker to write uploaded content outside the intended directory, potentially leading to unauthorized file manipulation.

A privilege escalation vulnerability exists in the internal CLI authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process able to manipulate the process execution environment can bypass RBAC validation checks, allowing privilege escalation to root.

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. This flaw allows an attacker on a fabric-connected switch to escalate privileges and execute arbitrary root commands locally or on other managed fabric members where remote execution is enabled.

An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and from 10.0.0 through 10.0.0a1. This occurs when an administrator deletes an account, triggering an internal routine that cleans up cryptographic keys. Malformed account names can include shell metacharacters that lead to command injection.

A buffer overflow vulnerability exists in the WebTools administrative interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. This flaw occurs during configuration download or file transfer operations by authenticated users with permissions to perform configuration downloads using remote server profiles. Exploitation can cause a crash of the weblinker daemon, potentially impacting system availability.

A command injection vulnerability exists in the WebTools administrative interface of Brocade Fabric OS. It affects versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with permissions to perform configuration downloads using remote server profiles can exploit this to execute arbitrary shell commands with root privileges on the switch.

Brocade Fabric OS versions before 9.2.2d and versions 10.0.0 through 10.0.0a1 have a vulnerability where the system directly accepts Apache configuration file data during service setup or re-initialization. This flaw allows an attacker who can corrupt the configuration structure to cause a persistent denial of service (DoS) by preventing the web management service from starting or recovering. This impacts the administrative web interface, making it unavailable for management tasks.

An OS command injection vulnerability exists in the PAM session cleanup routines during SSH session termination on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with a username or profile identifier containing shell metacharacters can execute arbitrary commands with root privileges when their SSH session ends.

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. This flaw allows an authenticated, high-privileged remote attacker to execute arbitrary system commands with root permissions by supplying specially crafted parameters containing shell metacharacters when configuring SSH known host settings.

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS running on the MXG610 platform. This flaw affects versions before 9.2.2d and allows an unauthenticated, network-adjacent attacker to exploit an unauthenticated endpoint within the Single Sign-On (SSO) workflow to gain administrative access to the device management interface.

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Under specific conditions, an authenticated user can bypass authorization restrictions intended to prevent modifying another account's access privileges. Exploitation allows a lower-privileged user to assign administrative roles to a target account, leading to localized privilege escalation.

Brocade Fabric versions before 9.2.2d and from 10.0.0 through 10.0.0a1 contain a vulnerability in the handling of specific download protocols. Unsanitized parameter strings are used to construct system command strings executed by the firmware management daemon. This allows an attacker with elevated privileges to execute arbitrary shell commands due to lack of input sanitization on fields such as host or file path.

An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. This flaw allows arbitrary operating system commands to be executed when an administrator initiates a configuration download using a malicious or compromised configuration file. The vulnerability arises because the management daemon relays user-supplied parameters directly to an internal utility script without proper sanitization of shell metacharacters.

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. This flaw allows an authenticated administrative user to manipulate system files by submitting a crafted status file parameter, potentially causing denial of service, system file destruction, host compromise, or data leakage.

An arbitrary file and directory deletion vulnerability exists in the REST API management interface for USB storage operations on Brocade Fabric OS versions before 10.0.1. Authenticated users with USB management privileges can exploit this flaw to delete arbitrary files or directories on the switch's local root filesystem by manipulating target paths, bypassing intended USB mount point restrictions.

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this vulnerability by submitting a specially crafted request with an arbitrary fabric identifier, enabling unauthorized cross-fabric operations and access to configuration details of other tenants or Virtual Fabrics.

An input validation vulnerability in the Brocade Fabric OS administrative management API's security certificate management component allows an authenticated attacker with certificate deletion privileges to execute arbitrary system commands. This occurs because user-supplied certificate identifiers are not properly sanitized before being passed to external system routines. The vulnerability affects Fabric OS versions before 9.2.2d and versions 10.0.0 through 10.0.0a1.

A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. This flaw causes PAM modules to process stale or incorrect client IP addresses during user authentication in a multi-threaded environment, leading to inaccurate audit records and potential access control bypasses when policies rely on client IP attributes.